image:
  repository: tccr.io/truecharts/xenorchestra
  tag: v5.122.0@sha256:bb903b02dd82fc5173681fbcca875f908d8de834d05f051709d5c9ca04fddb6f
  pullPolicy: IfNotPresent
service:
  main:
    ports:
      main:
        protocol: https
        port: 10324
persistence:
  xo-data:
    enabled: true
    mountPath: "/var/lib/xo-server"
  redis-data:
    enabled: true
    mountPath: "/var/lib/redis"
portal:
  open:
    enabled: true
securityContext:
  container:
    readOnlyRootFilesystem: false
    runAsNonRoot: false
    capabilities:
      add:
        - SYS_ADMIN
    runAsUser: 0
    runAsGroup: 0
workload:
  main:
    podSpec:
      containers:
        main:
          probes:
            liveness:
              enabled: true
              type: exec
              command:
                - /healthcheck.sh
            readiness:
              enabled: true
              type: exec
              command:
                - /healthcheck.sh
            startup:
              enabled: true
              type: exec
              command:
                - /healthcheck.sh
          env:
            HTTPS_PORT: "{{ .Values.service.main.ports.main.port }}"
            # Just so it doesn't try to bind port 80
            HTTP_PORT: "{{ add1 .Values.service.main.ports.main.port }}"
            REDIRECT_TO_HTTPS: true