values.yaml

# Default values for mmli-cleandb-api
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.


# Arbitrary configuration, unique to this application
config:
  # Defined as an encrypted SealedSecret (see below)
  # NOTE: This overrides the hardcoded values below
  existingSecret: moldb-cleandb-api

  # Alternatively, you can hardcode the values here instead (for local development only)
  # These are ignored if existingSecret is defined above
  CLEAN_DB_USER: 'molfront'
  CLEAN_DB_PASSWORD: ''   # See SealedSecret below
  CLEAN_DB_HOST: 'moldb-postgres-r.moldb.svc.cluster.local'
  CLEAN_DB_PORT: '5432'
  CLEAN_DB_NAME: 'molfront'


# The Deployment captures everything about the container that will run
controller:
  # Define how many replicas of this application should run
  replicas: 1

  # Define which Docker image should be run for this application (container)
  image:
    repository: moleculemaker/mmli-cleandb-api
    pullPolicy: Always
    #pullSecrets: []

  # TODO: parameterize labels, tolerations, nodeSelector, resources, etc?


# Define how to access this application over the network
# The Service creates a static IP that will round-robin requests to the different replicas
service:
  type: ClusterIP
  protocol: TCP
  port: 8000


# Define whether / how to access this application over the public internet
ingress:
  enabled: true
  hostname: "fastapi.cleandb.mmli1.ncsa.illinois.edu"
  tls: true
  className: traefik
  annotations:
    # Automatically issue a TLS certificate for this ingress hostname
    kubernetes.io/tls-acme: "true"
    cert-manager.io/cluster-issuer: letsencrypt-production

    # Define Traefik strict TLS rules and Middlewares for ForwardAuth
    kubernetes.io/ingress.class: traefik
    traefik.ingress.kubernetes.io/router.tls: "true"

    # No keycloak group auth:
    traefik.ingress.kubernetes.io/router.middlewares: openenzymedb-oed-staging-cors-header@kubernetescrd

    # For keycloak group auth:
    #traefik.ingress.kubernetes.io/router.middlewares: openenzymedb-oed-staging-cors-header@kubernetescrd,openenzymedb-oed-staging-redirect-to-login@kubernetescrd,openenzymedb-oed-staging-private-auth@kubernetescrd


# TODO: in the future if this is split into prod/staging, this secret would likely be for staging
# Additional Kubernetes resources to deploy along with this Helm chart
# SealedSecrets, Middlewares, Volume definitions, etc
extraDeploy:
  # First, we build up in plaintext the Secret that we would like to encrypt (seal)
  # After building up a raw Secret, the cluster admin can encrypt them using the following command:
  #     kubeseal --format yaml < mmli-cleandb-api.moldb.secret.yaml > mmli-cleandb-api.moldb.sealedsecret.yaml
  # SealedSecrets can only be decrypted (unsealed) by our cluster's private key
  # This Secret will be automatically decrypted by our cluster, making it available to our application
  - apiVersion: bitnami.com/v1alpha1
    kind: SealedSecret
    metadata:
      creationTimestamp: null
      name: moldb-cleandb-api
      namespace: openenzymedb
    spec:
      encryptedData:
        CLEAN_DB_HOST: AgB6YliYBgcqILDX+oofh0Qr0RTaFm2nR6hVzr/M8N2aprBqQt586eFxSWKuDmXerB7MnaZxfyw59/xe5/7UD/eFgAo5xPgdOX6ayec8cKbvAf6phtcJLgv4RZfyHDDSlmZwvcPtjcEdqxV4QONFqkicD6S/Nxno3rUvXB+YEdYX+gqxyDQMdSuHSSEA5aWa9YG/Ih6WZRPthqLV/H0THrPTy71iVc2VdA/9RbtkiR/em/U5AN4hTrJGZaU8EnNGFCKsQNAizn1xcIZHbRduLohvPuRnfLaALPHw0gHQtYxUtRW6T03rtDimeNeZ8eiWQ4yuYmdSblEhJYCaaf6VCQscwxGYV21nIectngnac8YkoAR9mGA44d6UxdjDuPP0R5/Uu/hT/KzDCmyRLmW/wBE/Qmnpfn7ITWr+HnyeuNDJSFKxYxXBDckN3Zij4RveNE9KfzLE3ueL0lR7EmmvgO6ktUzFmfBI2ZVW+l+HWp4GS0XXpRfm+oyKYRoRzAEgmmesnH9wWwj5Pn7S5vm1B1+5RII0KbTSeiXovoLzi5x8mFNAX4I442qYphdEdFUagJBGYofJBU0H+seBU9CQoFHXESMbagslgV+ZPrARziXmlyeGRh8wWvUAiXm8oBBu7KpHXVXY69h1sLMUZMS/vHhZSBsUpYrYd1XCfNWOo17eAmq1EuClLWWIgtsZtJDpTC+RN1SHmOzU+xLSSZ9SjoarK73xZiuF9FDzRXyD+t3qrfesD1uEGC6E
        CLEAN_DB_NAME: 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
        CLEAN_DB_PASSWORD: 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
        CLEAN_DB_PORT: AgAcF8s75beESFIDH4BnjEnEhKgV9YFBrv2vZTK3yOZMTIiQ8RbrjZOXX2+LNstMDq8WS6Wp07IaM7gpqxgZmqJlVYN1M2qY/yamO/ZZUAshdvOtKRelClrBNVWIN9hOKFTOrBjNT074CJZa7EmUppONBQXL0G2lXhOkJ89eY+x7gWXONbtoUW2tosnTRdkDbAAtXbo3FP2ITTd37uaDu5x+CSNNQmei7S5jEK72rq4cWvsYVNZ/NZV0WMY17+2WPTZEmmnItupDYKl9ITZXsxqoPUG/5LRjHaBtRk1PbMsIyNC4aHhhRLNFBa77DRZ+KJEjifcxs4m/XN/m5XxAL0fvD9vScIw1DtbANAL5CbeWtOFnnZd9fJnDHKUDCHm3/XSV7GsMIe6EgvCA9DxKUcSfdLqk/bss0pW+iLUcPh3e11JCBMFZEQV9Pk9SzNy2j+cUsYla5GndNMdUKzezs+QGbDDgtr0Sdnkvp34TjsB3Qywy6uR7ojnKGIunzUTk+NsX6xQgNzR68zfQ3FZLHxCFo3EGuMQGUxARP/WCNlO9lPdI22SMqoIvGCRXJXcmaLlZJ7Vixis8eQEJZPMyTTvpIucIlncOQTDiftoEz+0H95yv5R3ZY0EX/jq5yhwGlZG5ynXIF/LtxZcHS2rmQMicsqf9XeQAANp3UMXN67eKbAQZAlUcsYoz8ULXQjawQk182USp
        CLEAN_DB_USER: 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
        DATABASE_URL: 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
      template:
        metadata:
          creationTimestamp: null
          name: moldb-cleandb-api
          namespace: openenzymedb
        type: Opaque