appDomain: $APP_DOMAIN_URL

ingress:
  className: openshift-default
  additionalAnnotations:
    "haproxy.router.openshift.io/timeout": "5m"

storage:
  type: filesystem
  size: 32Gi

#storage:
#  type: s3
#  region: https://s3-openshift-storage.apps.cluster-mdt2d.dynamic.redhatworkshops.io:443
#  bucket: trustify-e0a5d862-ff90-47bd-80b4-d9b93f48a394
#  accessKey:
#    valueFrom:
#      secretKeyRef:
#        name: tpa-bucket-claim
#        key: AWS_ACCESS_KEY_ID
#  secretKey:
#    valueFrom:
#      secretKeyRef:
#        name: tpa-bucket-claim
#        key: AWS_SECRET_ACCESS_KEY

database:
  #sslMode: require
  host:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.host
  port:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.port
  name:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.name
  username:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.user
  password:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.password

createDatabase:
  name:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.name
  username:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.admin
  password:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.adminpassword

migrateDatabase:
  username:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.admin
  password:
    valueFrom:
      secretKeyRef:
        name: tpa-postgresql-credentials
        key: db.adminpassword

modules:
  createDatabase:
    enabled: true
  migrateDatabase:
    enabled: true

oidc:
  issuerUrl: https://sso.<your-cluster-ingressdomain-here>/realms/trusted-artifact-signer
  clients:
    frontend:
      clientId: frontend
    cli:
      clientId: cli
      clientSecret:
        valueFrom:
          secretKeyRef:
            name: oidc-cli
            key: client-secret