global:
  imageRegistry: ""
  defaultStorageClass: "" 
  imagePullSecrets: []
  compatibility:
    openshift:
      adaptSecurityContext: auto
    appArmor:
      enabled: false

fullname: pgadmin4

image:
  registry: docker.io
  repository: dpage/pgadmin4
  tag: ""
  pullPolicy: IfNotPresent
  pullSecrets: []

commonLabels:
  app: pgadmin4
commonAnnotations: {}

extraDeploy: []

replicas: 1

# strategy:
#   type: RollingUpdate
#   rollingUpdate:
#     maxSurge: 25%
#     maxUnavailable: 25%

containerPort: 5050
disablePostfix: true
enableServiceLinks: false
auth:
  email: admin@pgadmin.org
  password: ""
  existingSecret: ""
  passwordKey: password
extraEnvVars: []
# - name: PGADMIN_CONFIG_LOGIN_BANNER
#   value: '"Welcome to pgAdmin4 :)"'
extraVolumes: []
extraVolumeMounts: []

config_local:
  enabled: false
  existingSecret: ""
  configKey: config_local.py
  data: ""
#  data: |
#    DEBUG = True
#    JSON_LOGGER = True
#    AUTHENTICATION_SOURCES = ['oauth2', 'internal']

serverDefinitions:
  enabled: false
  data: {}
#   "1":
#     Name: Minimally Defined Server
#     Group: Servers
#     Port: 5432
#     Username: postgres
#     Host: myHost
#     MaintenanceDB: postgres
#     ConnectionParameters:
#       sslmode: prefer
#       connect_timeout: 10

preferences:
  enabled: false
  data: {}
#   misc:user_interface:theme: dark
#   file_manager:options:file_upload_size: 500

resources:
  requests:
    cpu: 500m
    memory: 1Gi
  limits:
    cpu: 500m
    memory: 1Gi

persistence:
  enabled: true
  size: 1Gi
  storageClass: ""
  accessModes: ["ReadWriteOnce"]

service:
  type: ClusterIP
  port: 80
  annotations: {}
  loadBalancerIP: ""

serviceAccount:
  create: true
  name: ""
  automountServiceAccountToken: false

ingress:
  enabled: false
  hostname: pgadmin4.local
  annotations: {}
  # If set, enables TLS configuration in the Ingress resource.
  tlsSecret: ""
startupProbe:
  enabled: false
  httpGet:
    path: /misc/ping
    port: http
  initialDelaySeconds: null
  periodSeconds: null
  timeoutSeconds: null
  failureThreshold: null

readinessProbe:
  enabled: true
  httpGet:
    path: /misc/ping
    port: http
  initialDelaySeconds: null
  periodSeconds: null
  timeoutSeconds: null
  failureThreshold: null

livenessProbe:
  enabled: false
  httpGet:
    path: /misc/ping
    port: http
  initialDelaySeconds: null
  periodSeconds: null
  timeoutSeconds: null
  failureThreshold: null

podSecurityContext:
  enabled: true
  fsGroupChangePolicy: Always
  sysctls: []
  supplementalGroups: []
  fsGroup: 1001

containerSecurityContext:
  enabled: true
  seLinuxOptions: {}
  runAsUser: 1001
  runAsGroup: 1001
  runAsNonRoot: true
  privileged: false
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
  capabilities:
    drop: ["ALL"]
  seccompProfile:
    type: RuntimeDefault
  appArmorProfile:
    type: RuntimeDefault
  windowsOptions:
    hostProcess: false