#version: airflow, 1.16.0
ingress:
  web:
    enabled: true
    annotations:
      cert-manager.io/cluster-issuer: "root-ca-issuer"
      cert-manager.io/duration: 8760h
      cert-manager.io/renew-before: 720h
      konghq.com/plugins: oidc-plugin, keycloak-authz-plugin
    hosts:
      - name: "demo01-air1.gke.paasup.io"
        tls:
          enabled: true
          secretName: "demo01-air1-tls-secret"

executor: "KubernetesExecutor"

config:
  core:
    executor: KubernetesExecutor
    default_timezone: kst
  logging:
    colored_console_log: "False"
    logging_level: "INFO"
  webserver:
    enable_proxy_fix: "True"
    rbac: "True"
    default_ui_timezone: kst

scheduler:
  replicas: 1

dags:
  persistence:
    enabled: true
    size: 5Gi
    storageClassName: longhorn
    accessMode: ReadWriteMany
  gitSync:
    enabled: true
    repo: "https://github.com/lucirr/actions-test.git"
    branch: main
    rev: HEAD
    depth: 1
    subPath: ""
    credentialsSecret: "demo01-air1-infisicalsecret"
    env:
      - name: GIT_SSL_NO_VERIFY
        value: "true"

webserver:
  defaultUser:
    enabled: true
    password: "Test12345678!"
  livenessProbe:
    initialDelaySeconds: 120
  readinessProbe:
    initialDelaySeconds: 120
  startupProbe:
    initialDelaySeconds: 30
  webserverConfig: |
    AUTH_ROLE_PUBLIC = 'User'

logs:
  persistence:
    enabled: true
    size: 5Gi
    storageClassName: longhorn

statsd:
  enabled: false

postgresql:
  enabled: true
  auth:
    username: "postgres"
    existingSecret: "demo01-air1-infisicalsecret"
    secretKeys:
      userPasswordKey: "postgres-password"
  primary:
    persistence:
      enabled: true
      size: 8Gi
      storageClass: ""

migrateDatabaseJob:
  useHelmHooks: false

data:
  metadataSecretName: "demo01-air1-infisicalsecret"