# Teslamate - Tesla data logger
# Uses CNPG PostgreSQL with auto-rotating passwords via ESO

image:
  repository: teslamate/teslamate
  tag: 1.30.1
  pullPolicy: IfNotPresent

env:
  TZ: America/Chicago
  
  # PostgreSQL configuration (uses CNPG-managed database)
  DATABASE_HOST: pg-teslamate-rw.teslamate.svc
  DATABASE_USER: teslamate
  DATABASE_NAME: teslamate
  
  # Database password from CNPG-generated secret
  DATABASE_PASS:
    valueFrom:
      secretKeyRef:
        name: pg-teslamate-app
        key: password
  
  # Encryption key from Vault
  ENCRYPTION_KEY:
    valueFrom:
      secretKeyRef:
        name: teslamate-config-secret
        key: encryption-key
  
  # MQTT settings (disabled by default, can enable later)
  DISABLE_MQTT: "true"
  
  # Virtual host for proper URL generation
  VIRTUAL_HOST: teslamate.kube.huskypup.net
  
  # Port configuration
  PORT: "4000"

service:
  main:
    ports:
      http:
        port: 4000

# Ingress disabled - Istio VirtualService handles routing
ingress:
  main:
    enabled: false

persistence:
  import:
    enabled: false

# Disable built-in postgresql (we use CNPG)
postgresql:
  enabled: false

securityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
      - ALL

# Resource limits
resources:
  requests:
    memory: "256Mi"
    cpu: "50m"
  limits:
    cpu: "500m"
    memory: "512Mi"

# Health probes
probes:
  liveness:
    enabled: true
    custom: true
    spec:
      httpGet:
        path: /
        port: 4000
      initialDelaySeconds: 10
      periodSeconds: 10
      timeoutSeconds: 5
      failureThreshold: 3
  readiness:
    enabled: true
    custom: true
    spec:
      httpGet:
        path: /
        port: 4000
      initialDelaySeconds: 5
      periodSeconds: 5
      timeoutSeconds: 3
      failureThreshold: 2
  startup:
    enabled: true
    custom: true
    spec:
      httpGet:
        path: /
        port: 4000
      initialDelaySeconds: 10
      periodSeconds: 5
      timeoutSeconds: 3
      failureThreshold: 12

# Reloader annotations for auto-restart on secret changes
podAnnotations:
  secret.reloader.stakater.com/reload: "pg-teslamate-app,teslamate-config-secret"