storage:
  credentials:
    s3:
      - bucketPath: "$storage.credentials.s3.bucketPath"
        region: "us-east-1"
        awsRoleArn:
        serviceEndpoint: "$storage.credentials.s3.serviceEndpoint"
        credentialsSecretName: "$INFISICAL_SECRET"

auth:
  enabled: true
  users:
    - name: "{{ .Username }}"
      email: "{{ .Email }}"

  provider: keycloak
  authorizationUrl: "$KEYCLOAK_URL/auth/realms/$KEYCLOAK_REALM/protocol/openid-connect/auth"
  clientSecretName: "$INFISICAL_SECRET"

privateCA:
  enabled: true
  secretName: "{{ .Name }}-tls-secret"

server:
  statefulset:
    image:
      repository: paasup/unitycatalog
      tag: "0.3.0-minio-250522"
    resources: {}
    nodeSelector: {}
    tolerations: []
    affinity: {}
  ingress:
    enabled: true
    className: "apisix"
    annotations:
      cert-manager.io/cluster-issuer: root-ca-issuer
      k8s.apisix.apache.org/plugin-config-name: https-redirect
    hosts:
      - host: "{{ .Name }}.{{ .Domain }}"
        paths:
          - path: /
            pathType: Prefix
    tls:
      - hosts:
          - "{{ .Name }}.{{ .Domain }}"
        secretName: "{{ .Name }}-tls-secret"
  config:
    persistence:
      enabled: true
      accessModes: ["ReadWriteOnce"]
      size: 100Mi
      storageClassName: ""
    logLevel: "INFO"

db:
  type: postgresql
  postgresqlConfig:
    user: uc_default_user
    password: "$db.postgresqlConfig.password"
    database: ucdb

postgresql:
  enabled: true
  auth:
    username: "uc_default_user"
    password: ""
    database: "ucdb"
    existingSecret: "$INFISICAL_SECRET"

  persistence:
    enabled: true
    accessModes:
      - ReadWriteOnce
    size: 5Gi
    storageClassName: ""