image:
  repository: tccr.io/truecharts/kimai
  tag: v2.0.35@sha256:064005e7296208101c07aa22c911bd3b886ae1d33ecc144e8cc158f47de0fe8e
  pullPolicy: IfNotPresent

kimai:
  credentials:
    adminMail: admin@change.me
    adminPass: ChangeME
  trusted_hosts:
    - localhost

workload:
  main:
    podSpec:
      securityContext:
        fsGroup: 33
      containers:
        main:
          securityContext:
            readOnlyRootFilesystem: false
            runAsUser: 0
            runAsGroup: 0
            capabilities:
              disableS6Caps: true
              add:
                - CHOWN
                - DAC_OVERRIDE
                - FOWNER
                - SETGID
                - SETUID
          env:
            DB_PASS:
              secretKeyRef:
                expandObjectName: false
                name: '{{ printf "%s-%s" .Release.Name "mariadbcreds" }}'
                key: mariadb-password
            DB_HOST:
              secretKeyRef:
                expandObjectName: false
                name: '{{ printf "%s-%s" .Release.Name "mariadbcreds" }}'
                key: plainhost
            APP_SECRET:
              secretKeyRef:
                name: kimai-secret
                key: APP_SECRET
          envFrom:
            - configMapRef:
                name: kimai-config
          probes:
            liveness:
              enabled: true
              path: /en/login
            readiness:
              enabled: true
              path: /en/login
            startup:
              enabled: true
              type: tcp

service:
  main:
    ports:
      main:
        port: 10198
        targetPort: 8001

persistence:
  data:
    enabled: true
    mountPath: /opt/kimai/var/data
  plugins:
    enabled: true
    mountPath: /opt/kimai/var/plugins
  varlock:
    enabled: true
    type: emptyDir
    mountPath: /var/lock

mariadb:
  enabled: true
  mariadbUsername: kimai
  mariadbDatabase: kimai

portal:
  open:
    enabled: true