# Redis backing toolshed's managed cache add-on.
#
# Deployed as shared infrastructure in its own namespace rather than inside
# the toolshed namespace, so it is addressed over cluster DNS like any other
# platform component and its lifecycle is independent of the application
# that happens to be its first consumer:
#
#   redis.redis.svc.cluster.local:6379
#
# The admin password comes from Vault through External Secrets — see
# devops-infra-argo-config/secretstores/toolshed-redis-credentials.yaml. The
# Secret must exist before this pod can start; a missing Secret leaves the
# init container in CreateContainerConfigError rather than failing in a way
# that explains itself.
#
# Read values.yaml's `config` block before changing anything about
# authentication here. The absence of `requirepass` is deliberate and
# security-relevant, not an oversight.

fullnameOverride: redis

image:
  repository: redis
  tag: "7-alpine"
  pullPolicy: IfNotPresent

existingSecret: redis-credentials

persistence:
  enabled: true
  storageClass: local-path
  # Holds the ACL file and nothing else worth keeping — snapshotting is off
  # (see config.save). 1Gi is already far more than needed; local-path
  # cannot resize in place, so it is sized up front rather than tightly.
  size: 1Gi

config:
  # The node has 8GB and was at its ceiling before Postgres was added; the
  # demo apps were scaled to zero to make room for that. 48mb is a real
  # cache for a handful of small internal tools and costs little.
  maxmemory: 48mb
  maxmemoryPolicy: allkeys-lru
  save: ""

resources:
  requests:
    cpu: 25m
    memory: 32Mi
  limits:
    memory: 96Mi