image:
  repository: kimai/kimai2
  tag: apache-2.1.0-prod@27b7e83d471f5adf7127d05c6dfab5c961bedf51dab405bfa585a12d62dbf517
  pullPolicy: IfNotPresent

kimai:
  credentials:
    adminMail: admin@change.me
    adminPass: ChangeME
  trusted_hosts:
    - localhost

workload:
  main:
    podSpec:
      securityContext:
        fsGroup: 33
      containers:
        main:
          securityContext:
            readOnlyRootFilesystem: false
            runAsUser: 0
            runAsGroup: 0
            capabilities:
              disableS6Caps: true
              add:
                - CHOWN
                - DAC_OVERRIDE
                - FOWNER
                - SETGID
                - SETUID
          env:
            DB_PASS:
              secretKeyRef:
                expandObjectName: false
                name: '{{ printf "%s-%s" .Release.Name "mariadbcreds" }}'
                key: mariadb-password
            DB_HOST:
              secretKeyRef:
                expandObjectName: false
                name: '{{ printf "%s-%s" .Release.Name "mariadbcreds" }}'
                key: plainhost
            APP_SECRET:
              secretKeyRef:
                name: kimai-secret
                key: APP_SECRET
          envFrom:
            - configMapRef:
                name: kimai-config
          probes:
            liveness:
              enabled: true
              path: /en/login
            readiness:
              enabled: true
              path: /en/login
            startup:
              enabled: true
              type: tcp

service:
  main:
    ports:
      main:
        port: 10198
        targetPort: 8001

persistence:
  data:
    enabled: true
    mountPath: /opt/kimai/var/data
  plugins:
    enabled: true
    mountPath: /opt/kimai/var/plugins
  varlock:
    enabled: true
    type: emptyDir
    mountPath: /var/lock

mariadb:
  enabled: true
  mariadbUsername: kimai
  mariadbDatabase: kimai

portal:
  open:
    enabled: true