# Helm values overrides for an air-gapped Chef 360 Platform deployment.
# This file redirects all container image pulls to your local private registry
# instead of the internet. Replace all <PLACEHOLDER> values before use.
replicated:
  isAirgap: true
  images:
    replicated-sdk: "<PRIVATE_REGISTRY>/chef-360/replicated-sdk-image:<VERSION>"

kots:
  configuration:
    eula:
      accepted: true

global:
  # Default registry for all container images.
  # This value is used as a fallback when a service doesn't have its own registry override below.
  image:
    registry: "<PRIVATE_REGISTRY>"
  log_level: info
  topology: hyperconverged-nonha
  storageClass: <STORAGE_CLASS>
  # Don't change this value.
  managedCluster: true
  log_storage:
    enable_general_logs: true
    enable_audit_logs: true
  chef_habitat:
    enabled: false

  # Per-service registry overrides.
  # Each Chef 360 Platform component pulls images from a different source path.
  # All paths must point to your local registry so no internet access is required.
  ecr:
    ECR_URI: "<PRIVATE_REGISTRY>/chef-360"
  docker:
    DOCKER_URI: "<PRIVATE_REGISTRY>/chef-360"
    DOCKER_MAILPIT_URI: "<PRIVATE_REGISTRY>/chef-360"
    DOCKER_OPENSEARCH_URI: "<PRIVATE_REGISTRY>/chef-360"
    DOCKER_FLUENT_BIT_URI: "<PRIVATE_REGISTRY>/chef-360"

  # Tenant configuration.
  # A tenant is an isolated Chef 360 Platform organization with its own users, nodes, and policies.
  # This section creates the initial tenant and admin user on first install.
  tenants:
    - tenant:
      fqdn: <TENANT_FQDN>:<PORT>
      slug: <TENANT_SLUG>
      name: <ORGANIZATION_NAME>
      is_https: false
      enabled: true
      insecure: true
      notification_integration_name: Default-SMTP
      notification_integration_username: <ADMIN_EMAIL>
      notification_integration_password: <ADMIN_PASSWORD>
      notification_integration_senderemail: <SENDER_EMAIL>
      notification_integration_rootca: ""
      notification_integration_auth_type: none
      notification_integration_ssl_enable: false
      notification_integration_skip_validation: false
      notification_integration_smtp_host: mailpit
      notification_integration_smtp_port: 1025
      notification_integration_retry_enable: true
      notification_integration_no_of_retries: 2
      tenant_admin_email: <ADMIN_EMAIL>
      tenant_admin_first_name: <FIRST_NAME>
      tenant_admin_last_name: <LAST_NAME>
      ou_name: <ORGANIZATION_NAME>
      ou_description: ""
      create_default_skill_assembly: true
      license_base64: "<CHEF_360_PLATFORM_LICENSE>"

chef-platform:
  chef-services:
    platform-services:
      public-api-gateway:
        is_onprem: true
  infrastructure:
    # CloudNative-PG (cnpg) configuration.
    # CloudNative-PG is the Kubernetes operator that manages the PostgreSQL database cluster.
    # Backup is disabled here because S3-based backup requires internet access.
    cnpg:
      cloudnative-pg:
        image:
          repository: <PRIVATE_REGISTRY>/chef-360/cloudnative-pg


# Metrics server configuration.
# Enable this if your cluster doesn't have a metrics server installed.
# The metrics server is required for Horizontal Pod Autoscaling (HPA) in high-availability deployments.
metrics-server:
  enabled: false

