# Minimal Definite on-prem config for Azure Kubernetes Service.
#
# Azure uses a single shared storage key (not an HMAC pair) for blob access.
# Pull the key from the storage account's "Access keys" blade.
#
# Usage:
#   export POSTGRES_PASSWORD=...
#   export OIDC_CLIENT_SECRET=...
#   export AZURE_OPENAI_API_KEY=...
#   export AZURE_STORAGE_KEY=...

deployment:
  name: definite
  namespace: definite
  hostname: definite.acme.internal
  tls: cert_manager

postgres:
  url: postgres://definite:${POSTGRES_PASSWORD}@acme-pg.postgres.database.azure.com:5432/definite

object_store:
  type: azure
  account: acmedefinitelake
  container: definite
  credentials:
    env: AZURE_STORAGE_KEY

lakehouse:
  prefix: lake/
  storage:
    size: 50Gi
    storage_class_name: managed-csi-premium

auth:
  mode: oidc
  issuer: https://login.microsoftonline.com/<tenant-id>/v2.0
  client_id: <azure-ad-app-client-id>
  client_secret:
    env: OIDC_CLIENT_SECRET

llm:
  provider: azure_openai
  endpoint: https://acme.openai.azure.com
  deployment: gpt-4o
  api_key:
    env: AZURE_OPENAI_API_KEY

resources:
  api:
    replicas: 2
    cpu: "1"
    memory: 2Gi
  lakehouse:
    replicas: 1
    cpu: "4"
    memory: 16Gi
