namespace: dev

image:
  repository: nexus.essocode.ru/ess/emulator-smev
  tag: "{{.tag}}"
  libericaImage:
    repository: nexus.essocode.ru/bellsoft/liberica-openjdk-debian
    tag: "11"
  pullPolicy: Always

service:
  type: ClusterIP
  port: 8059
  targetPort: 8059
  portJMX: 9010
  targetPortJMX: 9010

replicaCount: 1

ingress:
  enabled: true
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: "0"
    kubernetes.io/ingress.class: nginx
    cert-manager.io/cluster-issuer: letsencrypt-prod
    cert-manager.io/issue-temporary-certificate: "true"
    acme.cert-manager.io/http01-edit-in-place: "true"
    ingress.kubernetes.io/ssl-redirect: "true"
  tlsEnabled: true  # New parameter to control TLS
  hosts:
    - host: smev-emulator.dev.essocode.ru
      paths:
        - path: /
          pathType: ImplementationSpecific
  tls:
    - secretName: emulator-dev-tls
      hosts:
        - smev-emulator.dev.essocode.ru

secret:
  enabled: true
  name: dev-smev-emulator-back-cred
  data:
    # smev-emulator
    APPLICATION_NAME: c21ldi1lbXVsYXRvcg==
    # 2.11
    APPLICATION_VERSION: Mi4xMQ==
    # 8059
    SERVER_PORT: ODA1OQ==
    # jdbc:postgresql://217.79.22.46:5432/dev_emul_smev
    SPRING_DATASOURCE_URL: amRiYzpwb3N0Z3Jlc3FsOi8vMjE3Ljc5LjIyLjQ2OjU0MzIvZGV2X2VtdWxfc21ldg==
    # root
    SPRING_DATASOURCE_USERNAME: cm9vdA==
    # root
    SPRING_DATASOURCE_PASSWORD: cm9vdA==
    # https://smev-emulator.dev.essocode.ru
    SWAGGER_URL: aHR0cHM6Ly9zbWV2LWVtdWxhdG9yLmRldi5lc3NvY29kZS5ydQ==
    # http://log-service.dev.svc.cluster.local:8055/api/v1/audit/external
    AUDIT_URL: aHR0cDovL2xvZy1zZXJ2aWNlLmRldi5zdmMuY2x1c3Rlci5sb2NhbDo4MDU1L2FwaS92MS9hdWRpdC9leHRlcm5hbA==
    # /v3/api-docs/**,/configuration/ui,/swagger-resources/**,/configuration/security,/swagger-ui.html,/swagger-ui/**,/v3/api-docs.yaml,/webjars/**,/.well-known/acme-challenge/**,/ws/**,/user/**,/favicon.ico,/api/v1/certificate-data/archive,/api/v1/trusted_certificate/archive,/api/v1/revoked_certificate,/api/v1/revoked_certificate/archive,/api/v1/revoked_certificate/{id:\d+},/api/v1/revoked_certificate/content/{id:\d+},/api/v1/verify/sign,/api/v1/certificate-data/xml,/api/v1/ca-ref-book,/api/v1/ca-ref-book/{id:\d+},/api/v1/ca-certificate/archive,/api/v1/ca-certificate/archive,/api/v1/trusted-certificate/archive,/api/v1/crl,/api/v1/crl/{id:\d+},/api/v1/crl/archive,/api/v1/user-certificate/,/api/v1/user-certificate/me,/api/v1/audit/,/api/v1/order-fk/{id:\d+}/cert/save,/api/v1/order-fk/{id:\d+}/cert/reset-status-issue,/api/v1/archive/**,/api/v1/change-mode/**,/api/v1/health,/actuator,/actuator/health,/actuator/info,/actuator/env,/actuator/beans,/actuator/metrics,/actuator/loggers,/actuator/mappings,/api/v1/notifications/send,/api/v1/order-fk/ucfk-response/**
    WHITE_LIST: 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
    # *
    ACTUATOR_ENDPOINTS: Kg==
    # http://log-service.dev.svc.cluster.local:8055
    LOG_SERVICE_BASE_URI: aHR0cDovL2xvZy1zZXJ2aWNlLmRldi5zdmMuY2x1c3Rlci5sb2NhbDo4MDU1

jvmOptions:
  xms: 1G
  xmx: 1536m
  gc: "-XX:+UseG1GC"
  minHeapFreeRatio: 10
  maxHeapFreeRatio: 30
  portJMX: 9010
  authenticateJMX: false
  sslJMX: false
  hostnameJMX: localhost
  localOnlyJMX: false
  timezone: UTC
  encoding: UTF-8
  logFilePath: /var/log/pep
  logFileName: emulator-smev.log

deployment:
  container:
    requests:
      cpu: 250m
      memory: 1Gi
    limits:
      cpu: 600m
      memory: 2Gi

jarFile: emulator-smev-0.0.1-SNAPSHOT.jar

env:
  APPLICATION_NAME: APPLICATION_NAME
  APPLICATION_VERSION: APPLICATION_VERSION
  SERVER_PORT: SERVER_PORT
  SPRING_DATASOURCE_URL: SPRING_DATASOURCE_URL
  SPRING_DATASOURCE_USERNAME: SPRING_DATASOURCE_USERNAME
  SPRING_DATASOURCE_PASSWORD: SPRING_DATASOURCE_PASSWORD
  SWAGGER_URL: SWAGGER_URL
  AUDIT_URL: AUDIT_URL
  WHITE_LIST: WHITE_LIST
  ACTUATOR_ENDPOINTS: ACTUATOR_ENDPOINTS
  LOG_SERVICE_BASE_URI: LOG_SERVICE_BASE_URI

appName: smev-emulator

imagePullSecrets:
  - registrypullsecret

resources: {}