apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: camunda
  namespace: camunda
spec:
  interval: 5m
  timeout: 15m
  values:
    global:
      vault:
        enabled: true
        role: camunda
        authPath: auth/kubernetes
      image:
        pullSecrets:
          - name: regcred
      identity:
        auth:
          publicIssuerUrl: "https://camunda-keycloak.contour.infra.sarex.tech/auth/realms/camunda-platform"
          identity:
            redirectUrl: "https://camunda-identity.contour.infra.sarex.tech"
          operate:
            redirectUrl: "https://camunda-operate.contour.infra.sarex.tech"
          tasklist:
            redirectUrl: "https://camunda-tasklist.contour.infra.sarex.tech"
          optimize:
            redirectUrl: "https://camunda-optimize.contour.infra.sarex.tech"
          webModeler:
            redirectUrl: "https://camunda-web-modeler.contour.infra.sarex.tech"
          console:
            redirectUrl: "https://camunda-console.contour.infra.sarex.tech"
    identityPostgresql:
      auth:
        usePasswordFiles: true
      primary:
        automountServiceAccountToken: true
        persistence:
          size: 10Gi
          storageClass: local-path
    identityKeycloak:
      postgresql:
        auth:
          usePasswordFiles: true
        primary:
          automountServiceAccountToken: true
          persistence:
            size: 10Gi
            storageClass: local-path
      vaultEnv:
        enabled: true
        role: camunda
        authPath: auth/kubernetes
        envFiles:
          KEYCLOAK_ADMIN_PASSWORD:
            path: secrets/data/camunda/keycloak-admin
            key: admin-password
          KEYCLOAK_PASSWORD:
            path: secrets/data/camunda/keycloak-admin
            key: admin-password
          KEYCLOAK_DATABASE_PASSWORD:
            path: secrets/data/camunda/postgresql
            key: password
      global:
        storageClass: local-path
      tolerations: []
    postgresql:
      auth:
        usePasswordFiles: true
      primary:
        automountServiceAccountToken: true
        persistence:
          size: 10Gi
          storageClass: local-path
    elasticsearch:
      master:
        persistence:
          size: 10Gi
          storageClass: local-path
        tolerations: []
      metrics:
        enabled: false
        serviceMonitor:
          enabled: false
        prometheusRule:
          enabled: false
        tolerations: []
    camundaCanary:
      enabled: false
    prometheusServiceMonitor:
      enabled: false
    console:
      image:
        pullSecrets:
          - name: regcred
      tolerations: []
    zeebe:
      pvcStorageClassName: local-path
      image:
        pullSecrets:
          - name: regcred
      tolerations: []
    zeebeGateway:
      image:
        pullSecrets:
          - name: regcred
      tolerations: []
    operate:
      image:
        pullSecrets:
          - name: regcred
      serviceAccount:
        automountServiceAccountToken: true
      tolerations: []
    tasklist:
      image:
        pullSecrets:
          - name: regcred
      serviceAccount:
        automountServiceAccountToken: true
      tolerations: []
    optimize:
      image:
        pullSecrets:
          - name: regcred
      serviceAccount:
        automountServiceAccountToken: true
      tolerations: []
    executionIdentity:
      image:
        pullSecrets:
          - name: regcred
      tolerations: []
    identity:
      image:
        pullSecrets:
          - name: regcred
      tolerations: []
    webModeler:
      image:
        pullSecrets:
          - name: regcred
      restapi:
        tolerations: []
      webapp:
        tolerations: []
      websockets:
        tolerations: []
    connectors:
      image:
        pullSecrets:
          - name: regcred
      serviceAccount:
        automountServiceAccountToken: true
      tolerations: []