storage:
  credentials:
    # S3 credentials for accessing the storage
    # Credential secret must contain the following keys - accessKey, secretKey.
    s3:
    - bucketPath: s3://test
      region: us-east-1
      awsRoleArn: 
      credentialsSecretName: minio-secret
      serviceEndpoint: https://minio.example.org

auth:
  enabled: true
  # TODO: It is not possible to create proper admin account. This is a workaround.
  users:
    - name: admin
      email: paasup@paasup.io
  # List of users to be created in the system. Each user must contain the following keys - name, email.
  # - name: admin
  #   email: test@example.com

  provider: keycloak
  # Supported values: google, okta, keycloak, other
  # other: Use this option if you want to use a custom OAuth provider. UI does not have any built-in support for this option.

  authorizationUrl: https://keycloak.example.org/auth/realms/paasup/protocol/openid-connect/auth
  clientSecretName: uc-sso-secret
  # Client secret must contain the following keys - clientId, clientSecret.
  # authorizationUrl: https://accounts.google.com/o/oauth2/auth
  # tokenUrl: https://oauth2.googleapis.com/token
  # clientSecretName: my-client-secret

privateCA:
  enabled: true
  secretName: "unitycatalog-tls"

server:
  statefulset:
    image:
      repository: paasup/unitycatalog
      tag: "0.3.0-s3"
  ingress:
    enabled: true
    className: kong
    annotations:
      cert-manager.io/cluster-issuer: root-ca-issuer
      konghq.com/https-redirect-status-code: '301'
      konghq.com/protocols: https
    hosts:
      - host: unitycatalog.example.org
        paths:
          - path: /
            pathType: ImplementationSpecific
    tls:
      - hosts:
          - unitycatalog.example.org
        secretName: unitycatalog-tls
  config:
    persistence:
      enabled: true
      accessModes: [ "ReadWriteOnce" ]
      size: 100Mi
      storageClassName: ""
    logLevel: "DEBUG"
    # logLevel: "INFO"


db:
  type: postgresql
  postgresqlConfig:
    user: uc_default_user
    password: uc_default_password
    database: ucdb

postgresql:
  enabled: true
  auth:
    username: "uc_default_user"
    password: "uc_default_password"
    database: "ucdb"
  
  persistence:
    enabled: true
    accessModes:
      - ReadWriteOnce
    size: 5Gi
    storageClassName: ""