---
# Default values for third-party/clickhouse (Bitnami ClickHouse subchart).
# Override per deployment with -f values_v3/cntr/<app>/values.yaml
# All ClickHouse keys are under "clickhouse:" for the subchart.

# --- Google SSO (oauth2-proxy) ---
oauth2Proxy:
  enabled: false

# --- External Secret (Vault → K8s Secret) ---
externalSecret:
  enabled: false
  path: ""
  secretName: ""
  annotations: {}

# --- Bitnami ClickHouse subchart ---
clickhouse:
  fullnameOverride: ""

  global:
    imageRegistry: ""
    imagePullSecrets: []
    storageClass: ""

  image:
    registry: docker.io
    repository: bitnami/clickhouse
    tag: ""
    digest: ""
    pullPolicy: IfNotPresent

  clusterName: default
  shards: 1
  replicaCount: 3

  keeper:
    enabled: false
    replicaCount: 3
    persistence:
      enabled: true
      size: 8Gi
      storageClass: ""

  auth:
    username: default
    password: ""
    existingSecret: ""
    existingSecretKey: ""

  persistence:
    enabled: true
    size: 8Gi
    storageClass: ""
    accessModes:
      - ReadWriteOnce
    mountPath: /bitnami/clickhouse

  ingress:
    enabled: false
    hostname: ""
    path: /
    pathType: ImplementationSpecific
    ingressClassName: ""
    tls: false
    certManager: false
    annotations: {}
    extraHosts: []
    extraTls: []
    extraRules: []

  service:
    type: ClusterIP
    ports:
      http: 8123
      native: 9000
      interserver: 9009
    nodePorts: {}
    annotations: {}

  networkPolicy:
    enabled: false
    allowExternal: true
    ingress: {}
    egress: {}

  podSecurityContext:
    enabled: true
    fsGroup: 1001

  containerSecurityContext:
    enabled: true
    runAsUser: 1001
    runAsNonRoot: true

  resources:
    requests: {}
    limits: {}

  tolerations: []

  affinity: {}
  podAntiAffinityPreset: ""
  podAffinityPreset: ""
  nodeAffinityPreset:
    type: ""
    key: ""
    values: []

  updateStrategy:
    type: RollingUpdate
    rollingUpdate: {}

  podManagementPolicy: OrderedReady

  defaultInitContainers:
    volumePermissions:
      enabled: true
      image:
        registry: docker.io
        repository: bitnami/os-shell
        tag: ""
        digest: ""
        pullPolicy: IfNotPresent
    copyOsShell:
      enabled: false
      image: {}

  extraEnvVars: []
  extraEnvVarsCM: ""
  extraEnvVarsSecret: ""
  extraVolumes: []
  extraVolumeMounts: []
  extraContainers: []
  extraInitContainers: []
  sidecars: []

  metrics:
    enabled: false
    serviceMonitor:
      enabled: false
    prometheusRule:
      enabled: false

  commonConfiguration: ""
  customConfiguration: ""
  customUsersConfiguration: ""
  customProfilesConfiguration: ""
  customZookeeperConfiguration: ""
  customClickhouseConfiguration: ""

# --- oauth2-proxy subchart defaults (overridden per deployment) ---
oauth2-proxy:
  replicaCount: 3
  config:
    existingSecret: ""
  extraArgs: {}
  extraVolumes:
    - name: custom-templates
      configMap:
        name: '{{ .Release.Name }}-oauth2-proxy-templates'
  extraVolumeMounts:
    - name: custom-templates
      mountPath: /templates
      readOnly: true
  service:
    portNumber: 80
  ingress:
    enabled: false
  sessionStorage:
    type: cookie
  redis-ha:
    enabled: false
  resources: {}