ollama:
  enabled: false
tika:
  enabled: false
websocket:
  enabled: false
redis-cluster:
  enabled: false
ingress:
  enabled: true
  annotations:
    cert-manager.io/cluster-issuer: "root-ca-issuer"
  host: "open-webui.example.com"
  tls: true
  existingSecret: "open-webui-tls-secret"
persistence:
  enabled: true
  size: 2Gi
  existingClaim: ""
  subPath: ""
  accessModes:
    - ReadWriteOnce
  storageClass: ""
  selector: {}
  annotations: {}
extraEnvVars:
  - name: OPENAI_API_KEY
    value: "0p3n-w3bu!"
  - name: OAUTH_CLIENT_ID
    value: open-webui
  - name: OAUTH_CLIENT_SECRET
    value: UXVwsmPSbWZ0pZkxwdgeY88vl9JJZJLQ
  - name: OPENID_PROVIDER_URL
    value: https://keycloak.example.com/auth/realms/paasup/.well-known/openid-configuration
  - name: OAUTH_PROVIDER_NAME
    value: paasup
  - name: OAUTH_SCOPES
    value: 'openid email profile'
  - name: ENABLE_LOGIN_FORM
    value: 'true'
  - name: SSL_CERT_FILE
    value: '/etc/ssl/certs/keycloak/ca.crt'
  - name: ENABLE_OAUTH_SIGNUP
    value: 'true'
  - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
    value: 'true'
  - name: DEFAULT_USER_ROLE
    value: user
  - name: ENV
    value: prod 

volumeMounts:
  initContainer: []
  container:
  - name: "keycloak-tls"
    mountPath: "/etc/ssl/certs/keycloak"

volumes:
- name: "keycloak-tls"
  secret:
    secretName: keycloak-tls-secret