initPassword:
  enabled: true
  password: ""
  passwordSecret: "$INFISICAL_SECRET"

timeZone: Asia/Seoul

starrocksCluster:
  enabledBe: false
  enabledCn: true

starrocksFESpec:
  replicas: 1
  runAsNonRoot: "false"
  service:
    type: LoadBalancer
    # apisix 게이트웨이가 쓰는 정적 IP를 그대로 재사용한다 — 80/443과 포트가 겹치지 않아
    # 같은 GCP 정적 IP에 별도 forwarding rule로 공존 가능(신규 IP 예약 불필요).
    loadbalancerIP: "34.64.109.9"
    # AWS 연동 + 사무실 접근만 허용 (그 외 인터넷 전체 차단)
    loadBalancerSourceRanges:
      - "13.124.10.134/32"
      - "43.200.81.130/32"
      - "125.141.12.182/32"
  resources:
    requests:
      cpu: 300m
      memory: 1Gi
    limits:
      cpu: 2
      memory: 4Gi  
  storageSpec:
    name: fe
    storageClassName: "standard-rwo"
    storageSize: 10Gi
    logStorageSize: 5Gi
  
  nodeSelector: {}
  affinity: {}
  tolerations: []
  
  config: |
    run_mode = shared_data
    cloud_native_storage_type = S3
    aws_s3_endpoint = $starrocksFESpec.config.endpoint

    aws_s3_path = $starrocksFESpec.config.path

    aws_s3_access_key = $starrocksFESpec.config.accesskey
    aws_s3_secret_key = $starrocksFESpec.config.secretkey
    aws_s3_use_instance_profile = false
    aws_s3_use_aws_sdk_default_behavior = false

    enable_load_volume_from_conf = true


starrocksCnSpec:
  replicas: 1
  runAsNonRoot: "false"
  resources:
    requests:
      cpu: 300m
      memory: 2Gi
    limits:
      cpu: 2
      memory: 4Gi  
  storageSpec:
    name: be 
    storageClassName: "standard-rwo"
    storageSize: 15Gi
    logStorageSize: 10Gi
  nodeSelector: {}
  affinity: {}
  tolerations: []
  autoScalingPolicy: {}


starrocksFeProxySpec:
  enabled: true
  resolver: "kube-dns.kube-system.svc.cluster.local"
  service:
    type: ClusterIP