values.yaml

# -- Number of replicas
replicaCount: 1

image:
  repository: ghcr.io/buggregator/server
  pullPolicy: IfNotPresent
  # -- Overrides the image tag (default is appVersion)
  tag: ""

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

# =============================================================================
# Database (SQLite)
# =============================================================================
database:
  # -- SQLite DSN: ":memory:" (default, data lost on restart) or file path for persistence
  dsn: ":memory:"

# =============================================================================
# Attachment storage (SMTP attachments, HTTP dump files)
# =============================================================================
attachmentStorage:
  # -- Storage mode: "memory" (default) or "filesystem"
  mode: memory
  # -- Directory for filesystem mode (relative to working dir or absolute path)
  path: /data/storage

# =============================================================================
# CORS
# =============================================================================
cors:
  # -- Comma-separated list of allowed CORS origins
  origins: "*"

# =============================================================================
# Authentication / SSO (OAuth2/OIDC)
# =============================================================================
auth:
  # -- Enable SSO authentication
  enabled: false
  # -- Auth provider: auth0, google, github, keycloak, gitlab, oidc
  provider: oidc
  # -- Provider URL (e.g. https://your-tenant.auth0.com)
  providerUrl: ""
  # -- OAuth client ID
  clientId: ""
  # -- OAuth client secret
  clientSecret: ""
  # -- OAuth callback URL (e.g. https://buggregator.example.com/auth/sso/callback)
  callbackUrl: ""
  # -- OAuth scopes
  scopes: "openid,email,profile"
  # -- JWT secret for signing internal session tokens (required when auth is enabled)
  jwtSecret: ""
  # -- Use existing secret for auth credentials (keys: client-id, client-secret, jwt-secret)
  existingSecret: ""

# =============================================================================
# MCP (Model Context Protocol) for AI assistants
# =============================================================================
mcp:
  # -- Enable MCP server
  enabled: false
  # -- Transport: "socket" or "http"
  transport: socket
  # -- Unix socket path (for socket transport)
  socketPath: /tmp/buggregator-mcp.sock
  # -- HTTP listen address (for http transport)
  addr: ":8001"
  # -- Bearer token for HTTP transport auth (optional)
  authToken: ""

# =============================================================================
# Supported event types
# =============================================================================
# -- Comma-separated list of supported event types
supportedEvents: "http-dump,inspector,monolog,profiler,ray,sentry,sms,smtp,var-dump"

# =============================================================================
# Service ports
# =============================================================================
service:
  type: ClusterIP
  # -- Main web UI + HTTP API port
  httpPort: 8000
  # -- SMTP server port for email capture
  smtpPort: 1025
  # -- Symfony VarDumper server port
  varDumperPort: 9912
  # -- Monolog server port
  monologPort: 9913

# =============================================================================
# Ingress
# =============================================================================
ingress:
  enabled: false
  className: ""
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # cert-manager.io/cluster-issuer: letsencrypt-prod
  hosts:
    - host: buggregator.local
      paths:
        - path: /
          pathType: Prefix
  tls: []
  #  - secretName: buggregator-tls
  #    hosts:
  #      - buggregator.local

# =============================================================================
# Storage (PVC for persistent data: SQLite DB, attachments)
# =============================================================================
storage:
  # -- Enable persistent storage
  enabled: true
  # -- Storage class (empty for default)
  storageClassName: ""
  # -- Storage size
  size: 5Gi
  # -- Access modes
  accessModes:
    - ReadWriteOnce

# =============================================================================
# Prometheus metrics
# =============================================================================
metrics:
  # -- Enable Prometheus metrics
  enabled: false
  # -- Separate metrics server address (e.g. ":9090"). Empty = serve /metrics on main HTTP server
  addr: ""
  # -- Enable Prometheus ServiceMonitor
  serviceMonitor:
    enabled: false
    # -- ServiceMonitor namespace (defaults to release namespace)
    namespace: ""
    # -- Additional labels for ServiceMonitor
    labels: {}
    # -- Scrape interval
    interval: 30s

# =============================================================================
# Service account
# =============================================================================
serviceAccount:
  create: true
  automount: true
  annotations: {}
  name: ""

# =============================================================================
# Pod configuration
# =============================================================================
podAnnotations: {}
podLabels: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

resources: {}
  # limits:
  #   cpu: 500m
  #   memory: 512Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

nodeSelector: {}
tolerations: []
affinity: {}