image:
  repository: ronivay/xen-orchestra
  tag: 5.143.1@sha256:f23a70e4c19bd1b5139cb17ec70330f33a76554a740eda1f28d3b57e2ca6d52d
  pullPolicy: IfNotPresent
service:
  main:
    ports:
      main:
        protocol: https
        port: 10324
persistence:
  xo-data:
    enabled: true
    mountPath: "/var/lib/xo-server"
  redis-data:
    enabled: true
    mountPath: "/var/lib/redis"
portal:
  open:
    enabled: true
securityContext:
  container:
    readOnlyRootFilesystem: false
    runAsNonRoot: false
    capabilities:
      add:
        - SYS_ADMIN
    runAsUser: 0
    runAsGroup: 0
workload:
  main:
    podSpec:
      containers:
        main:
          probes:
            liveness:
              enabled: true
              type: exec
              command:
                - /healthcheck.sh
            readiness:
              enabled: true
              type: exec
              command:
                - /healthcheck.sh
            startup:
              enabled: true
              type: exec
              command:
                - /healthcheck.sh
          env:
            HTTPS_PORT: "{{ .Values.service.main.ports.main.port }}"
            # Just so it doesn't try to bind port 80
            HTTP_PORT: "{{ add1 .Values.service.main.ports.main.port }}"
            REDIRECT_TO_HTTPS: true