# Helm values for OpenChoreo Control Plane in k3d single-cluster setup
global:
  baseDomain: openchoreo.localhost
  port: ":8080"

gateway:
  httpPort: 80
  httpsPort: 443
  envoy:
    mountTmpVolume: true

# Backstage configuration
backstage:
  enabled: false

# Thunder identity provider configuration
thunder:
  enabled: false

security:
  enabled: true
  oidc:
    issuer: "thunder"
    # Internal cluster URLs for backend validation
    wellKnownEndpoint: "http://amp-thunder-extension-service.amp-thunder.svc.cluster.local:8090/.well-known/openid-configuration"
    jwksUrl: "http://amp-thunder-extension-service.amp-thunder.svc.cluster.local:8090/oauth2/jwks"
    # Public URLs for browser OAuth flows
    authorizationUrl: "http://thunder.amp.localhost:8080/oauth2/authorize"
    tokenUrl: "http://thunder.amp.localhost:8080/oauth2/token"