# Chart defaults. Real configuration lives in
# helm-overrides/gke-toolshed-prd-usc1/postgresql/custom-values.yaml.

fullnameOverride: postgresql

image:
  # Pulled from Docker Hub, like every other infra component here (gitea,
  # vault, harbor). The base-images mirror in Harbor exists to remove
  # Docker Hub from the *application build* path and to minimise shipped
  # app images — it is not in play for platform components.
  repository: postgres
  tag: "16-alpine"
  pullPolicy: IfNotPresent

# Name of the Secret holding username/password. Created by External
# Secrets from Vault, not by this chart — a chart that generates its own
# database password regenerates it on every render, which silently locks
# you out of an existing volume.
existingSecret: postgresql-credentials
secretKeys:
  username: username
  password: password

database: toolshed

service:
  port: 5432

persistence:
  enabled: true
  storageClass: local-path
  size: 5Gi

# Tuned down hard. The box has 8GB total and is at its ceiling; PostgreSQL's
# default shared_buffers of 128MB is most of this pod's budget on its own.
config:
  sharedBuffers: 32MB
  maxConnections: "50"

resources:
  requests:
    cpu: 50m
    memory: 64Mi
  limits:
    memory: 256Mi