# Example overrides — copy to my-secrets.yaml and fill in before install.
# Never commit real credentials.
#
# MongoDB: pick ONE mode below (helm install fails if both or neither is set).

image:
  repository: gcr.io/cs-poc-sasxbttlzroculpau4u6e2l/sp-backend
  tag: "v4.3.5"
  pullSecrets:
    - name: softprobe-gcr-pull

# --- Mode A: bundled in-cluster MongoDB (pick ONE) ---
mongodb:
  bundled:
    auth:
      password: "CHANGE_ME_mongo_password"
    # AKS Azure Disk (adjust per cluster):
    # storageClass: managed-csi
    # storageSize: 250Gi
    # Optional resource overrides (defaults in values.yaml):
    # resources:
    #   requests:
    #     cpu: "6"
    #     memory: 24Gi
    #   limits:
    #     cpu: "8"
    #     memory: 28Gi
    # Dedicated mongo node pool (label nodes: workload=softprobe-mongo):
    # placement:
    #   nodeSelector:
    #     workload: softprobe-mongo
    #   tolerations:
    #     - key: workload
    #       operator: Equal
    #       value: mongo
    #       effect: NoSchedule

# --- Mode B: external MongoDB (pick ONE; use unique DB name per release on shared servers) ---
# mongodb:
#   connectionString: "mongodb://sp_user:SECRET@mongo.company.internal:27017/acme_sp_storage_db?authSource=admin"

# Encrypts targetRequest/targetResponse in MongoDB before storage (AES-256).
# Back up secretKey — lost key means old recordings cannot be replayed.
# To store payloads in plaintext: encryption.enabled: false
encryption:
  enabled: true
  secretKey: "CHANGE_ME_base64_32_byte_key"

# Optional Redis auth (leave empty for no password):
# redis:
#   password: "CHANGE_ME_redis_password"
#   placement:
#     nodeSelector:
#       workload: softprobe-backend
#     tolerations:
#       - key: workload
#         operator: Equal
#         value: backend
#         effect: NoSchedule

# Optional JVM / CPU / memory overrides (defaults match values.yaml):
# spBackend:
#   javaOpts: "-Xms12g -Xmx22g"
#   resources:
#     requests:
#       cpu: "6"
#       memory: 24Gi
#     limits:
#       cpu: "8"
#       memory: 28Gi
#   placement:
#     nodeSelector:
#       workload: softprobe-backend
#     tolerations:
#       - key: workload
#         operator: Equal
#         value: backend
#         effect: NoSchedule

# Optional external exposure:
# service:
#   type: LoadBalancer
# ingress:
#   enabled: true
#   host: sp-backend.example.com
#   className: nginx
