fullnameOverride: "elasticsearch-mcp"

replicas: 1

image:
  repository: docker.elastic.co/mcp/elasticsearch
  tag: latest
  pullPolicy: Always

labels:
  bu: infra
  team: devops

serviceAccount:
  create: true
  annotations: {}
  name: ""

podAnnotations: {}

podSecurityContext: {}

securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  allowPrivilegeEscalation: false
  capabilities:
    drop:
      - ALL

priorityClassName: ""

nodeSelector: {}

tolerations: []

affinity: {}

resources:
  requests:
    cpu: 100m
    memory: 128Mi
  limits:
    cpu: 500m
    memory: 512Mi

livenessProbe:
  httpGet:
    path: /
    port: 8080
  initialDelaySeconds: 30
  periodSeconds: 30
  timeoutSeconds: 5
  failureThreshold: 3

readinessProbe:
  httpGet:
    path: /
    port: 8080
  initialDelaySeconds: 10
  periodSeconds: 10
  timeoutSeconds: 5
  failureThreshold: 3

service:
  port: 8080
  type: ClusterIP

# ExternalSecret — syncs ES credentials from Vault via ClusterSecretStore "vault-backend"
# Vault path: meesho/stg/cntr/devop/elasticsearch-mcp  keys: ES_URL, ES_API_KEY
externalSecrets:
  refreshInterval: "150s"
  secretStoreRef:
    name: vault-backend
    kind: ClusterSecretStore
  dataFrom:
    secretKey: ""

createContourGateway: false

ingress:
  enabled: true
  ingressClassName: nginx-internal
  servicePortNumber: 8080
  hosts:
    - host: ""
      paths:
        - path: /
          pathType: Prefix
  annotations:
    kubernetes.io/ingress.class: nginx-internal
    nginx.ingress.kubernetes.io/ssl-redirect: "false"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
    nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
  slowStart:
    enabled: false
    window: "120s"
    aggression: 1
    minPercent: 10