image:
  repository: tccr.io/truecharts/ocis
  tag: v3.0.0@sha256:55264618b01bec8d712ec829caee909466634702d092c9e1f8e84adc47085a47
  pullPolicy: IfNotPresent
service:
  main:
    ports:
      main:
        protocol: https
        port: 9200
        targetPort: 9200
persistence:
  data:
    enabled: true
    mountPath: "/var/lib/ocis"
  config:
    enabled: true
    mountPath: "/etc/ocis"
    targetSelectAll: true
portal:
  open:
    enabled: true
securityContext:
  container:
    readOnlyRootFilesystem: false
workload:
  main:
    podSpec:
      initContainers:
        init:
          type: install
          enabled: true
          imageSelector: image
          command:
            - "/bin/sh"
            - "-c"
            - |
              /usr/bin/ocis init > /etc/ocis/password <<'EOF'
              yes
              EOF
        main:
          probes:
            liveness:
              type: tcp
            readiness:
              type: tcp
            startup:
              type: tcp
            OCIS_INSECURE: true
            ACCOUNTS_DEMO_USERS_AND_GROUPS: false
            OCIS_LOG_PRETTY: true
            OCIS_LOG_COLOR: true
            PROXY_TLS: false
            PROXY_HTTP_ADDR: "0.0.0.0:{{ .Values.service.main.ports.main.port }}"
            OCIS_URL: "https://localhost:{{ .Values.service.main.ports.main.port }}"
            OCIS_JWT_SECRET:
              secretKeyRef:
                name: secrets
                key: OCIS_JWT_SECRET
            STORAGE_TRANSFER_SECRET:
              secretKeyRef:
                name: secrets
                key: STORAGE_TRANSFER_SECRET
            OCIS_MACHINE_AUTH_API_KEY:
              secretKeyRef:
                name: secrets
                key: OCIS_MACHINE_AUTH_API_KEY