global:
  registry: TMPL_IMAGE_REGISTRY
  region: TMPL_REGION
  logicalRegion: TMPL_LOGICAL_REGION
  env: TMPL_ENV

opsServer:
  image:
    repository: observability-ops-server
    tag: "e5a584a"
    pullPolicy: IfNotPresent
  azure:
    subscriptionId: TMPL_SUBSCRIPTION_ID
    resourceGroup: TMPL_RESOURCE_GROUP
  config:
    vendor: azure
    selfMonitorEndpoint: http://prometheus-operated.self-monitoring:9090

sourceController:
  image:
    repository: TMPL_IMAGE_REGISTRY/third-party/fluxcd/source-controller

helmController:
  image:
    repository: TMPL_IMAGE_REGISTRY/third-party/fluxcd/helm-controller

ingress:
  enabled: true
  className: azure-application-gateway
  annotations:
    appgw.ingress.kubernetes.io/health-probe-path: /ops/api/v1/
    appgw.ingress.kubernetes.io/waf-policy-for-path: TMPL_WAFV2_ACL_ARN
    cert-manager.io/acme-challenge-type: http01
    cert-manager.io/cluster-issuer: letsencrypt-for-o11y
  hosts:
    - host: www.rs.TMPL_LOGICAL_REGION.azure.TMPL_HOSTED_ZONE_NAME
      paths:
        - path: /ops/api/v1/
          pathType: Prefix
          port: 8180
  tls:
    - hosts:
        - www.rs.TMPL_LOGICAL_REGION.azure.TMPL_HOSTED_ZONE_NAME
      secretName: ops-server-certs

serviceAccount:
  annotations:
    azure.workload.identity/client-id: TMPL_OPS_SERVER_ROLE_ARN

flux:
  repo:
    registry: TMPL_FLUX_REGISTRY
    provider: azure

nodeSelector:
  node_type: worker