##
## Global options relating to Develocity as a whole rather than a specific subsystem.
##
#
# global:
#

##
## Public URL
##
#
#   hostname: ge.example.com     # Hostname used to access the web interface by web browsers, etc. Required.
#   externalSSLTermination: true # If we are using HTTPS but not with termination in the built-in ingress or proxy. Default false.
#   externalPort: 8180           # Set to specify the external port the installation is available on. Only required if not using standard ports (80/443).
#

##
## Develocity license settings
##
## Exactly one of these options must be set.
##
## If performing an online (ie not airgapped) installation that pulls images from the Gradle image registry,
## and you are setting the license via global.license.secretName, you will also need to set an imagePullSecret
## with the license in dockerconfigjson form. If setting the license via global.license.file, the image pull
## secret is generated automatically.
##
#
#   license:
#     file: ABCD1234                        # Full license file content as a multiline string or Base64 data part of the license. Can also be set using --set-file global.license.file=/path/to/file
#     secretName: my-example-license-secret # Name of Secret that contains the license. License should be in the "license" key in the secret.
#

##
## Image pull settings
##
## For airgap installations, the registry and an image pull secret that can pull from that registry are required.
##
#
#   image:
#     registry: registry.example.com/gradle-enterprise # Registry to pull images from. Default registry.gradle.com/gradle-enterprise
#     imagePullSecret: my-example-image-pull-secret    #
#     tag: some-custom-tag                             # Tag to pull. Default is the Develocity version.
#     imagePullPolicy: Always                          # Default IfNotPresent.
#

##
## Storage settings
##
## There are no defaults set. If your cluster has a default storage class, this will be used.
## Otherwise, you will need to set the storage class to be used for data and backups if
## using the embedded database.
##
#
#   storage:
#     data:
#       class: fast-storage
#     backup:
#       class: slow-cheap-storage
#

##
## Openshift
##
## Set to true if Develocity will be deployed in an OpenShift cluster.
##
#
#   openshiftInstallation: true # Default false
#

##
## Unattended installation
##
## These cover auto-configuring aspects of Develocity that are controlled by the Administration section of the application.
## Contact Gradle Support for assistance with unattended installation.
## WARNING: Making changes to the unattended configuration will *overwrite* any configuration changes made in the user interface.
## See https://gradle.com/help/helm-admin-unattended-configuration for details.
##
#
#   unattended:
#    key: oijqefoijqOIQJFoijefoiqjfoij  # Encryption key for secrets in the configuration, if any. Default none.
#    configuration:
#       version: 9
#       advanced:
#         app:
#           heapMemory: 4608
#           offHeapMemory: 1024
#           params: {}
#           scanPayloadCacheSize: 2048
#         appBackgroundProcessor:
#           heapMemory: 3584
#           offHeapMemory: 1024
#           params: {}
#         buildCacheNode:
#           heapMemory: 1024
#           offHeapMemory: 768
#           params: {}
#         distributionBroker:
#           heapMemory: 1024
#           offHeapMemory: 768
#           params: {}
#       auth:
#         anonymousPermissions:
#         - viewScan
#         - publishScan
#         external: null
#         projects:
#           acceptAnonymousProjects: true
#           enabled: false
#         roles:
#           admin:
#             assignToNewExternalUsers: false
#             description: Administer Develocity
#             displayName: Administrator
#             identityProviderAttributeValue: null
#             permissions:
#             - administerGe
#             - administerProjects
#             - administerCache
#             - generateSupportBundle
#           ci-agent:
#             assignToNewExternalUsers: false
#             description: Use Develocity for CI builds
#             displayName: CI Agent
#             identityProviderAttributeValue: null
#             permissions:
#             - publishScan
#             - testDistribution
#             - predictiveTestSelection
#             - readCache
#             - writeCache
#             - accessAllDataWithOrWithoutAssociatedProject
#             - accessDataWithoutAssociatedProject
#           developer:
#             assignToNewExternalUsers: false
#             description: Use Develocity
#             displayName: Developer
#             identityProviderAttributeValue: null
#             permissions:
#             - viewScan
#             - publishScan
#             - testDistribution
#             - predictiveTestSelection
#             - readCache
#             - readCacheWriteCas
#         scim:
#           enabled: false
#           token: null
#         timeouts:
#           accessTokenLifespan: 10
#           ssoSessionIdleTimeout: 5760
#           ssoSessionMaxLifespan: 43200
#       backups: null
#       buildCache:
#         allowUntrustedNodeSsl: false
#         storageSize: 10000
#       buildScans:
#         diskSpaceMonitoring:
#           autoDeleteWhileFreeSpaceLessThanPercentage: null
#           rejectIncomingWhileFreeSpaceLessThanPercentage: null
#           sendWarningEmailWhenFreeSpaceLessThanPercentage: null
#         incomingStorageType: null
#         keepDays: null
#       dailyMaintenanceTime: 04:00
#       email: null
#       helpContact:
#         email: null
#         name: null
#       legacyObjectStorage:
#         provider: null
#       network: null
#
#       systemPassword: [SYSTEM_PASSWORD_VALUE]
##
##
## Not all settings need to be set when providing an unattended config. The following example shows how to only configure an HTTP proxy:
##
#   unattended:
#    key: oijqefoijqOIQJFoijefoiqjfoij  # Encryption key for secrets in the configuration, if any. Default none.
#    configuration:
#       version: 9
#       network:
#         additionalTrust:                          # Default none.
#         proxy:
#           protocol: https                         # Default http
#           host: proxy.gradle.com
#           port: 8080                              # Default 80
#           excludedHosts:                          # Default empty
#             - some.external
#             - '*.internal'
#           auth:                                   # Default none
#             username: user
#             password: "FEIpqflj265QEFq2efq54e"

##
## Horizontal scaling
##
#
#   scaling:
#     replicas: 5                          # Default 1.
#   antiAffinity:
#     enabled: true                        # Default false
#     topologyKey: my-example-topology-key # Default "kubernetes.io/hostname"
#

##
## Network policies
##
## Whether to create network policies to restrict traffic from Develocity pods.
## By default these are not created.
##
#
#   networkPolicies: true # Default false.
#

##
## Node selection
##
#
#   nodeSelector:            # Default none
#     foo: bar
#   tolerations:
#     - key: "dedicated"     # Default none
#       operator: "Equal"
#       value: "node-taints"
#       effect: "NoSchedule"
#

##
## Pod annotations
##
## Set if you require additional pod annotations to support other Kubernetes tooling.
##
#
#   podAnnotations:
#     ann1: foo
#     ann2: "bar.io/baz"
#

##
## End global section
##

##
## Database section
##
## By default, Develocity will store data in an embedded database.
## To connect to a user-managed database, configure connection details here.
##
#
# database:
#   location: user-managed # Default "embedded"
#

##
## Embedded database resources and storage
##
## If using the embedded database, its resources can be configured here.
##
#
#   resources:
#     requests:
#       cpu: 500m    # Default 250m
#       memory: 2Gi  # Default 1Gi
#     limits:
#       cpu: 4       # Default 2
#       memory: 20Gi # Default 8Gi
#
#   storage:
#     data:
#       capacity: 500Gi # Default 250Gi
#     backup:
#       capacity: 750Gi # Default 250Gi
#

##
## User-managed database connection details
##
## Connection details can be set here directly or specified by a ConfigMap.
##
#
#   connection:
#     configMapName: my-example-database-connection-config-map
#     # OR
#     host: db.example.com                         # Required for user-managed database if connection secret not provided.
#     port: 5555                                   # Default 5432
#     databaseName: example_gradle_enterprise_prod # Required for user-managed database if connection secret not provided.
#     params: "?ssl=false"                         # No default.
#

##
## User-managed database credentials
##
## Credentials details can be set here directly or specified by secrets.
##
## Typically only a superuser account credential is required - Develocity can then create other
## necessary accounts and schemas for the app automatically.
##
## It is also possible to instead set up the database using a script and only configure the more restricted
## application account credentials here.
##
## If you specify the name a secret that isn't managed by the Develocity Helm installation, your
## installation won't be automatically restarted during `helm upgrade` when the underlying secret value changes.
## When the secret value changes, you need to restart all the pods in the Develocity Helm installation,
## to take this change into account.
#
#   credentials:
#
#     superuser:
#       secretName: my-example-db-superuser-secret
#       # OR
#       username: postgres
#       password: "superS3cret!"
#
#     # OR
#     app:
#       secretName: my-example-db-app-secret
#       # OR
#       password: "superS3cret!"
#     migrator:
#       secretName: my-example-db-migrator-secret
#       # OR
#       password: "superS3cret!"
#

##
## End database section
##

##
## Ingress section
##
## By default, Develocity does not create an Ingress to route traffic.
## A built-in ingress can be enabled and configured here.
##
#
# ingress:
#   enabled: true                              # Default false
#   ingressClassName: my-example-ingress-class # No default, use the default ingress provided by the cluster, if any.
#   pathType: ImplementationSpecific           # Use 'ImplementationSpecific' to delegate path matching to the IngressClass; default is 'Prefix'
#   annotations:                               # Set of custom ingress annotations. Default none, applied to every ingress objects
#     ann1: foo
#     ann2: "bar.io/baz"

##
## Ingress SSL settings
##
## By default, the generated Ingress will have HTTPS support and use self-signed SSL certificates.
## Both of these can be changed. Certificates can be set directly here, set using
## --set-file ingress.ssl.key=keyfile --set-file ingress.ssl.cert=certfile
## or set in a Secret.
##
#
#   ssl:
#     enabled: false # Default true except if `global.externalSSLTermination: true`
#     # OR
#     key: |
#       -----BEGIN RSA PRIVATE KEY-----
#       MIIEpQIBAAKCAQEA4qV8JlqDMi7y85Ykq8dn7uIsi609D6KuFtlc+UvNYjatz0+u
#       ...
#       G7tI0qQ6F20e5R4tPpEDKCFZykyvgGMhfLzsvVlrgaVW8QbVK4YWNtQ=
#       -----END RSA PRIVATE KEY-----
#     cert: |
#       -----BEGIN CERTIFICATE-----
#       MIIDKjCCAhKgAwIBAgIRAPNTIHf6/oUuzMKm3ffGNOgwDQYJKoZIhvcNAQELBQAw
#       ..
#       z+P5RmRxU/kaaFB+Vuw1pRezbaAtZNorVgXnBwrdseY4zLGyhAcGcR9v+VtCiQ==
#       -----END CERTIFICATE-----
#     # OR
#     secretName: my-example-ingress-ssl-cert-secret
#

##
## HTTP Ingress settings
##
## Some features of Develocity that use HTTP (REST API, GraphQL) may require a specific
## configuration to be compatible with the Ingress implementation in-use in your Kubernetes cluster.
## For this section, we recommend you to consult the official documentation of your Ingress Controller
##
#   http:
##    Set of custom ingress annotations. Default none, applied to ingress objects in charge of http rules
##    Those annotations have precedence over `ingress.annotations` in case of conflict.
#     annotations:
#       nginx.ingress.kubernetes.io/proxy-body-size: "0"
#       nginx.ingress.kubernetes.io/proxy-request-buffering: "off"
#     serviceAnnotations:              # Set of custom service annotations. Default none, applied to services backed by a GRPC compatible component
#       projectcontour.io/upstream-protocol.h2c: "http"

##
## GRPC Ingress settings
##
## Some features of Develocity that use GRPC (e.g. Bazel build scans) may require a specific
## configuration to be compatible with the Ingress implementation in-use in your Kubernetes cluster.
## GRPC calls are internally using `Http2 without TLS`, also called `h2c`.
## For this section, we recommend you to consult the official documentation of your Ingress Controller and specifically
## the section about GRPC support.
#   grpc:
##    Set of custom ingress annotations. Default none, applied to ingress objects in charge of grpc rules
##    Those annotations have precedence over `ingress.annotations` in case of conflict.
#     annotations:
#       nginx.ingress.kubernetes.io/backend-protocol: "GRPC"
#     serviceAnnotations:              # Set of custom service annotations. Default none, applied to services backed by a GRPC compatible component
#       projectcontour.io/upstream-protocol.h2c: "grpc"

##
## End ingress section
##

##
## Proxy section
##
## The proxy is the main entrypoint for web-based traffic into Develocity.
## If not using the default Ingress, you should route traffic to the gradle-proxy service
## using a service with an external ip, a node port, a load balancer, an OpenShift route
## or some other method.
##
#
# proxy:
##
## Proxy resources
##
## Resources used by the proxy pod
##
#
#   resources:
#     requests:
#       cpu: 1000m      # Default 1000m
#       memory: 512Mi   # Default 512Mi
#     limits:
#       cpu: 1000m      # Default 1000m
#       memory: 1Gi     # Default 1Gi

##
## End proxy section
##

##
## Operator section
##
# operator:
#   resources:
#     requests:
#       cpu: 1      # Default 100m
#       memory: 1Gi # Default 1Gi
#     limits:
#       cpu: 4      # Default 2
#       memory: 1Gi # Greater than or equal to requested memory. We suggest keeping them the same. Default 1Gi

##
## End operator section
##

##
## Enterprise app section
##
## The amount of memory allocated to Java based application should consider Heap Memory, Off Heap memory and some buffer for bookkeeping
## If configured wrongly OutOfMemory errors are likely to happen.
##
# enterprise:
#   resources:
#     requests:
#       cpu: 2       # Default 1
##                   # Heap and Off Heap memory is configured in Develocity UI, under Administration -> Advanced section -> App
#       memory: 8Gi  # [Heap memory] + [Off Heap Memory] *1.05; Default 4Gi
#     limits:
#       cpu: 2       # Default 2
#       memory: 8Gi  # Greater than or equal to requested memory. We suggest keeping them the same. Default 4Gi
#   serviceAccount:
#     annotations:
##      If using Amazon EKS and S3 Build Scan storage, follow these instructions to allow Develocity to access S3 using a service account:
##      https://gradle.com/help/helm-admin-s3-eks-service-account
#       "eks.amazonaws.com/role-arn": "arn:aws:iam::111122223333:role/the-enterprise-iam-role-name"
## For both, token and key: the default value is empty and then uses the previously set value or, if this is not available, generates random value.
## If a fixed value is required it can be specified here.
## To generate a value, `cat /dev/urandom | head -c <size> | base64` can be used, for example.
#   session:
#     # token used for signing the data associated with client sessions. Should be a secret key of 64 byte length, base64 encoded.
#     token:        # Default empty
#     # key is a symmetric encryption key used for client-side session data. Should be a cryptographically secure byte value of length 16, base64 encoded.
#     key:          # Default empty

##
## End enterprise app section
##

##
## Enterprise app background processor section
##
# enterpriseBackgroundProcessor:
#   enabled:            # Default false
#   resources:
#     requests:
#       cpu: 2       # Default 1
#       memory: 8Gi  # Should be same as enterprise.resources.requests.memory; Default 4Gi
#     limits:
#       cpu: 2       # Default 1
#       memory: 8Gi  # Should be same as enterprise.resources.limits.memory; Default 4Gi
#   scaling:
#     replicas: 5    # Default global.scaling.replicas
#   serviceAccount:
#     annotations:
##      If using Amazon EKS and S3 Build Scan storage, follow these instructions to allow Develocity to access S3 using a service account:
##      https://gradle.com/help/helm-admin-s3-eks-service-account
#       "eks.amazonaws.com/role-arn": "arn:aws:iam::111122223333:role/the-enterprise-iam-role-name"
##
## End Enterprise app background processor section
##

##
## Build cache node section
##
## The amount of storage allocated to the built-in build cache node can be set here.
##
## The amount of memory allocated to Java based application should consider Heap Memory, Off Heap memory and some buffer for bookkeeping
## If configured wrongly OutOfMemory errors are likely to happen.
##
## If you specify the name a secret that isn't managed by the Develocity Helm installation, your
## installation won't be automatically restarted during `helm upgrade` when the underlying secret value changes.
## When the secret value changes, you need to restart all the pods in the Develocity Helm installation,
## to take this change into account.
#
# buildCacheNode:
#   storage:
#     data:
#       capacity: 100Gi # Default 10Gi
#
#   resources:
#     requests:
#       cpu: 1      # Default 1
##                  # Heap and Off Heap memory is configured in Develocity UI, under Administration -> Advanced section -> Built-in build cache node
#       memory: 4Gi # [Heap memory] + [Off Heap memory] * 1.05; Default 1Gi
#     limits:
#       cpu: 2      # Default 2
#       memory: 4Gi # Greater than or equal to requested memory. We suggest keeping them the same. Default 1Gi
#
#   buildCacheBuiltin:
#     secretName: my-example-build-cache-builtin-secret # Being the key build.cache.builtin.secret
#       # OR
#     value: "superS3cret!"

##
## End build cache node section
##

##
## Test distribution section
##
## The amount of storage allocated to the test distribution broker can be set here.
##
## The amount of memory allocated to Java based application should consider Heap Memory, Off Heap memory and some buffer for bookkeeping
## If configured wrongly OutOfMemory errors are likely to happen.
##
#
# testDistribution:
#   storage:
#     data:
#       capacity: 100Gi # Default 10Gi
#
#   resources:
#     requests:
#       cpu: 2       # Default 1
##                   # Heap and Off Heap memory configured in Develocity UI, under Administration -> Advanced section -> Test Distribution broker
#       memory: 8Gi  # [Heap memory] + [Off Heap memory] * 1.05; Default 2Gi
#     limits:
#       cpu: 2       # Default 2
#       memory: 8Gi  # Greater than or equal to requested memory. We suggest keeping them the same. Default 2Gi
##
## End test distribution section
##

##
## Metrics section
##
## The amount of storage allocated to metrics can be set here.
##
#
# metrics:
#   storage:
#     data:
#       capacity: 10Gi # Default 200Mi
#
#   support:
#     resources:
#       requests:
#         cpu: 1 # Default 500m
#         memory: 1Gi # Default 256Mi
#       limits:
#         cpu: 2 # Default 500m
#         memory: 2Gi # Default 256Mi
#
#   resources:
#     requests:
#       cpu: 1      # Default 50m
#       memory: 1Gi # Default 256Mi
#     limits:
#       cpu: 2      # Default 250m
#       memory: 2Gi # Default 500Mi
#

##
## End metrics section
##

##
## Authentication broker section
##
## Resources allocated to the authentication broker can be set here.
##
## If you specify the name a secret that isn't managed by the Develocity Helm installation, your
## installation won't be automatically restarted during `helm upgrade` when the underlying secret value changes.
## When the secret value changes, you need to restart all the pods in the Develocity Helm installation,
## to take this change into account.
#
# authenticationBroker:
#   resources:
#     requests:
#       cpu: 1      # Default 500m
#       memory: 2Gi # Default 1Gi
#     limits:
#       cpu: 4      # Default 2
#       memory: 4Gi # Default 2Gi
#
#   adminPassword:
#     secretName: my-example-admin-password-secret # Being the key keycloak.admin.password
#       # OR
#     value: "superS3cret!"
#   clientSecret:
#     secretName: my-example-client-secret-secret # Being the key keycloak.client.secret
#       # OR
#     value: "superS3cret!"

##
## End authentication broker section
##

##
## Monitoring section
##
## Resources allocated to the monitoring can be set here.
##
#
# monitoring:
#   logging:
#     resources:
#       requests:
#         cpu: 500m     # Default 500m
#         memory: 512Mi # Default 512Mi
#       limits:
#         cpu: 1000m    # Default 1000m
#         memory: 768Mi # Default 768Mi
#   storage:
#     data:
#       capacity: 20Gi  # Default 20Gi
#

##
## End monitoring section
##

# objectStorage:
#   type: "disabled" # Supported values: `disabled`, `embedded`, `s3`, `googleCloud`, `azure`. By default `embedded`.
#
#   embedded:
#     credentials:
#       app:
#         secretName: "my-embedded-app-credentials-secret"
#           # OR
#         password: "my-embedded-app-password"
#       migrator:
#         secretName: "my-embedded-migrator-credentials-secret"
#         # OR
#         password: "my-embedded-migrator-password"
#       superuser:
#         secretName: "my-embedded-superuser-credentials-secret"
#         # OR
#         password: "my-embedded-superuser-password"
#     resources:
#       requests:
#         cpu: 1            # Default 1
#         memory: 1Gi       # Default 1Gi
#       limits:
#         cpu: 2            # Default 2
#         memory: 2Gi       # Default 2Gi
#     storage:
#       data:
#         capacity: 10Gi    # Default 10Gi
#
#   s3:
#     bucket: "my-s3-bucket"
#     region: "my-s3-region"
#       # OR
#     endpoint: "my-s3-endpoint"
#     credentials:
#       secretName: "my-s3-credentials-secret"
#         # OR
#       source: "configuration"
#       accessKey: "my-s3-access-key"
#       secretKey: "my-s3-secret-key"
#         # OR
#       source: "environment"
#     advancedParams: # List of advanced parameters
#
#   googleCloud:
#     bucket: "my-google-cloud-bucket"
#     credentials:
#       secretName: "my-google-cloud-credentials-secret"
#       # OR
#       source: "configuration"
#       accessKey: "my-google-cloud-access-key"
#       secretKey: "my-google-cloud-secret-key"
#     advancedParams: # List of advanced parameters
#
#   azure:
#     container: "my-azure-container"
#     credentials:
#       secretName: "my-azure-credentials-secret"
#       # OR
#       source: "connectionString"
#       connectionString: "my-azure-connectionString"
#       # OR
#       source: "sas"
#       sas: "my-azure-sas"
#       endpoint: "my-azure-endpoint"
#     advancedParams: # List of advanced parameters
#
##
## End monitoring section
##