namespace: observability
replicaCount: 1

vendor: aws
region: us-west-2

image:
  repository: 557537366020.dkr.ecr.us-west-2.amazonaws.com/diagnosis-query
  tag: ""
  pullPolicy: IfNotPresent

serviceAccount:
  name: regional-server-controller-manager

service:
  type: ClusterIP
  port: 8081
  targetPort: 8081

# Chart-level fallback; deploy prefers deployments/drhouse/o11yapi/defaults.yaml.
resources:
  limits:
    cpu: "1"
    memory: 2Gi
  requests:
    cpu: "500m"
    memory: 1Gi

persistence:
  storage: 20Gi
  storageClassName: ""

duckDB:
  switchAllEnabled: false
  switchTime: "0"
  grayTenantIds: []

env:
  topsqlOldClusters: ""
  podMemoryLimitsMB: true
  duckdbMemoryPercentage: ""
  storageAccount: ""
  envFromSecret: ""

ingress:
  # Leave empty to inherit diagnosis-query env's ingress.internal/external.ingressClassName.
  # Override explicitly only when o11yapi needs a different class.
  ingressClassName: ""

# Athena settings for /api/v1/olap (AWS only).
# Empty workgroup derives o11y-olap-{logical_region} from BUCKET_NAME at runtime.
athena:
  workgroup: ""
  database: o11y-logs
  catalog: AwsDataCatalog
  outputLocation: ""

# OLAP POST /olap wait (also via env OLAP_DEFAULT_WAIT_SECONDS / OLAP_MAX_WAIT_SECONDS).
olap:
  defaultWaitSeconds: 60
  maxWaitSeconds: 60

labels:
  app: o11y-diagnosis-query

o11yAuth:
  enabled: true
  # JWT_SECRET is injected from the Kubernetes Secret referenced below.
  # Default matches auth-server's secret name/key.
  jwtSecretName: auth-server-jwt
  jwtSecretKey: JWT_SECRET