values.yaml

replicaCount: 1

image:
  pullPolicy: IfNotPresent

nameOverride: ""
fullnameOverride: ""

config:
  # Config ownership mode:
  # - declarative: Helm/ConfigMap managed config (default)
  # - runtime: writable PVC managed at runtime (GUI/API edits)
  managementMode: declarative

master:
  enabled: false
  # GUI_ENABLED for backend on master pod.
  guiEnabled: true
  updateStrategy:
    type: Recreate
  gui:
    enabled: true
  persistence:
    existingClaim: ""
    accessMode: ReadWriteOnce
    size: 20Gi
    storageClassName: ""

ingress:
  enabled: true
  className: nginx
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/proxy-body-size: "101m"
  backend:
    # Optional explicit backend paths for ingress routing.
    # When set, these paths are used instead of hosts[].paths.
    # Useful when GUI is served under /ui and backend endpoints must stay at root paths (e.g. /api).
    paths: []
    pathType: Prefix
  hosts:
    - host: match.tolerant-software.de
      paths:
        - path: /
          pathType: Prefix
  gui:
    enabled: false
    redirectToTrailingSlash: true
    paths:
      - path: /ui
        pathType: Prefix
  tls: []

metrics:
  enabled: false
  path: /prometheus
  port: "8080"
  scheme: http
  service:
    annotations: {}
  serviceMonitor:
    enabled: false
    namespace: ""
    labels: {}
    interval: 30s
    scrapeTimeout: 10s

security:
  enabled: false
  oidc:
    identityProviderUrl: ""
    realm: ""
    clientId: ""

podAnnotations: {}
podLabels: {}

global:
  db:
    type: rocksdb
    host: ""
    port: 0
    name: match
    user: match
    password: match
    passwordSecretName: ""
    passwordSecretKey: db-password
    tablePrefix: ""
    url: /opt/tolerant/data/paging
    embeddedPagingDatabase:
      enabled: true
    rocksdbCluster:
      enabled: false
  match:
    environmentProfile: k8s
    license: ""
    serviceId: ""
    clusterSyncServicePort: 10100
    syncLease:
      ttlMillis: 1800000
      heartbeatMillis: 10000
      waitAllSynchronizedTimeoutMillis: 300000
    syncEvent:
      watermarkGraceMillis: 60000
      watermarkCheckIntervalMillis: 60000
      reconciliationBlockTimeoutMillis: 10800000
      recoveryBufferMaxEvents: 100000
      gapRecovery:
        maxAttempts: 6
        retryMillis: 2000
        maxConcurrentProjects: 2
    initialLoadMetadata:
      allowSameEpochVersionMismatch: false
    syncState:
      store: file
      hazelcastMapName: ProjectSyncState
      hazelcastCursorMapName: ProjectSyncCursor
      jdbc:
        url: ""
        user: ""
        password: ""
        passwordSecretName: ""
        passwordSecretKey: sync-state-jdbc-password
        table: TMATCH_CLUSTER_SYNC_STATE
        cursorTable: TMATCH_CLUSTER_SYNC_CURSOR
    hazelcast:
      enabled: false
      port: 5701
      clusterName: match-cluster
      joinMode: ""
      kubernetesServiceDNS: ""
      tcpMembers: []
      aws:
        region: ""
        securityGroupName: ""
        tagKey: ""
        tagValue: ""

imagePullSecrets: []
podSecurityContext: {}
securityContext: {}

volumes: []
volumeMounts: []

upgrade:
  stopMatchBeforeUpgrade:
    enabled: false
    kubectlImage: bitnami/kubectl:latest
    timeoutSeconds: 600

initialLoad:
  job:
    enabled: false
    projectId: matchProject-1
    # external data epoch used for initial-load metadata ("now" or Unix epoch milliseconds)
    dataEpoch: ""
    kubectlImage: bitnami/kubectl:latest
    timeoutSeconds: 900

persistence:
  keepPVCOnUninstall: true
  data:
    enabled: true
    ephemeral:
      enabled: false
      metadata:
        labels: {}
        annotations: {}
    accessMode: ReadWriteOnce
    size: 10Gi
    storageClassName: ""
  configFiles:
    # Declarative mode only:
    # Mount a PVC as /opt/tolerant/config to provide full customer-managed config files.
    # Must remain false in runtime mode.
    enabled: false
    existingClaim: ""
    accessMode: ReadWriteOnce
    size: 1Gi
    storageClassName: ""
  runtimeConfig:
    # Runtime mode only:
    # Writable config PVC mounted at /opt/tolerant/config (GUI/API edits persist here).
    # Ignored unless config.managementMode=runtime.
    existingClaim: ""
    accessMode: ReadWriteOnce
    size: 5Gi
    storageClassName: ""
    seedFromConfigMaps:
      # When enabled in runtime mode, copy default config files from chart ConfigMaps
      # into runtime PVC if files are missing (non-destructive seeding).
      enabled: true
      image: busybox:1.36
  largeCsv:
    enabled: false
    existingClaim: ""
    accessMode: ReadWriteOnce
    size: 10Gi
    storageClassName: ""
    mountPath: /opt/tolerant/incoming

containers:
  match:
    image: tolerantsoftware/match:12.2
    threadCount: "4"
    loggingProfile: console
    envCommon:
      - name: DB_DEFAULT_URL
        value: '{{ include "tolerant-match.dbJdbcUrl" . }}'
      - name: MATCH_DB_TYPE
        value: '{{ include "tolerant-match.dbTypeMatch" . }}'
      - name: DB_USER
        value: '{{ .Values.global.db.user }}'
      - name: DB_PASSWORD
        valueFrom:
          secretKeyRef:
            name: '{{ include "tolerant-match.dbPasswordSecretName" . }}'
            key: '{{ include "tolerant-match.dbPasswordSecretKey" . }}'
      - name: THREAD_COUNT
        value: '{{ .Values.containers.match.threadCount }}'
      - name: LOGGING_PROFILE
        value: '{{ .Values.containers.match.loggingProfile }}'
      - name: TLMATCH_SERVICE_ID
        value: '{{ include "tolerant-match.serviceId" . }}'
      - name: CLUSTER_SYNC_SERVICE_PORT
        value: '{{ .Values.global.match.clusterSyncServicePort }}'
      - name: HAZELCAST_PORT
        value: '{{ .Values.global.match.hazelcast.port }}'
      - name: HAZELCAST_CLUSTER_NAME
        value: '{{ if .Values.global.match.hazelcast.enabled }}{{ .Values.global.match.hazelcast.clusterName }}{{ else }}{{ "" }}{{ end }}'
    envPostgres:
      - name: MATCH_DB_PREFIX
        value: '{{ include "tolerant-match.dbTablePrefix" . }}'
    envRocksdbCluster: []
    envHazelcast:
      - name: POD_NAME
        valueFrom:
          fieldRef:
            fieldPath: metadata.name
    resources: {}
    livenessProbe:
      httpGet:
        path: /health/liveness
        port: http
      initialDelaySeconds: 30
      periodSeconds: 10
      timeoutSeconds: 5
      failureThreshold: 6
    readinessProbe:
      httpGet:
        path: /health/readiness
        port: http
      initialDelaySeconds: 10
      periodSeconds: 5
      timeoutSeconds: 5
      failureThreshold: 6
    startupProbe:
      httpGet:
        path: /health/readiness
        port: http
      initialDelaySeconds: 10
      periodSeconds: 5
      timeoutSeconds: 5
      failureThreshold: 360
  gui:
    enabled: false
    image: tolerantsoftware/match-gui:12.2
    imagePullPolicy: IfNotPresent
    port: 8081
    basePath: /ui
    apiBasePath: /
    env: []
    resources: {}
    securityContext: {}
    volumeMounts: []
  postgres:
    image: postgres:16.1
    resources: {}
    persistence:
      annotations: {}
      size: 10Gi
  mariadb:
    image: mariadb:11.4
    resources: {}
    persistence:
      annotations: {}
      size: 10Gi