# Default values for hsd-oauth-proxy.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: 070446044274.dkr.ecr.us-east-1.amazonaws.com/hsd-pfs-auth-gateway-oauth-proxy
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 8080
  ports:
    web1:
      port: 8080
      targetPort: 8080
      protocol: TCP
    web2:
      port: 9090
      targetPort: 9090
      protocol: TCP

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80

nodeSelector: {}

tolerations: []

affinity: {}
  
secretStoreBasePath: ""  #set the aws parameter store base path mentioned in terraform-api-gateway eg: "/<<cluster_id>>/<<module_name>>/<<namespace>>"

envVariables:
  #Input variables with default values
  OAUTH2_PROXY_HTTP_ADDRESS: "0.0.0.0:8080"  #Any change in port number needs to be updated in service port
  OAUTH2_PROXY_METRICS_ADDRESS: "0.0.0.0:9090" #Any change in port number needs to be updated in service port
  
  OAUTH2_PROXY_PROXY_PREFIX: ""  #eg: /<path>/oauth2
  OAUTH2_PROXY_REDIRECT_URL: "/oauth2/callback" #eg: /<path>/oauth2/callback
  
  OAUTH2_PROXY_COOKIE_EXPIRE: "24h0m0s"
  OAUTH2_PROXY_COOKIE_REFRESH: "0h28m0s"
  
  OAUTH2_PROXY_STANDARD_LOGGING: "false"
  OAUTH2_PROXY_REQUEST_LOGGING: "false"
  OAUTH2_PROXY_AUTH_LOGGING: "false"
   
  #Any additional OAuth2 specific enviroment variables can be added here