global:
  registry: TMPL_IMAGE_REGISTRY
  region: TMPL_REGION
  logicalRegion: TMPL_LOGICAL_REGION
  env: TMPL_ENV

opsServer:
  image:
    repository: observability-ops-server
    tag: "e04af89e6"
    pullPolicy: IfNotPresent
  config:
    vendor: aws
  resources:
    requests:
      cpu: 50m
      memory: 192Mi

sourceController:
  resources:
    requests:
      cpu: 50m
      memory: 192Mi

helmController:
  resources:
    requests:
      cpu: 50m
      memory: 192Mi

serviceAccount:
  annotations:
    eks.amazonaws.com/role-arn: TMPL_OPS_SERVER_ROLE_ARN

ingress:
  enabled: true
  className: alb
  annotations:
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/target-type: ip
    alb.ingress.kubernetes.io/certificate-arn: TMPL_CERTIFICATE_ARN
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
    alb.ingress.kubernetes.io/success-codes: 200,404
    alb.ingress.kubernetes.io/wafv2-acl-arn: TMPL_WAFV2_ACL_ARN
    alb.ingress.kubernetes.io/load-balancer-name: alb-rs-TMPL_LOGICAL_REGION
    alb.ingress.kubernetes.io/group.name: alb-rs-TMPL_LOGICAL_REGION
    alb.ingress.kubernetes.io/group.order: "1"
    alb.ingress.kubernetes.io/load-balancer-attributes: routing.http.drop_invalid_header_fields.enabled=true
    alb.ingress.kubernetes.io/ssl-redirect: '443'
    alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
    external-dns.alpha.kubernetes.io/hostname: www.rs.TMPL_LOGICAL_REGION.aws.TMPL_HOSTED_ZONE_NAME
  hosts:
    - host: www.rs.TMPL_LOGICAL_REGION.aws.TMPL_HOSTED_ZONE_NAME
      paths:
        - path: /ops/api/v1
          pathType: Prefix
          port: 8180
  tls: []

flux:
  repo:
    registry: TMPL_FLUX_REGISTRY
    provider: aws

nodeSelector:
  node_type: worker