apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: versitygw
  namespace: versitygw
spec:
  interval: 15m
  releaseName: versitygw
  targetNamespace: versitygw
  chart:
    spec:
      chart: versitygw
      version: 0.4.7
      sourceRef:
        kind: HelmRepository
        name: versitygw
        namespace: flux-system
  install:
    remediation:
      retries: 3
  upgrade:
    remediation:
      retries: 3
  postRenderers:
    - kustomize:
        patches:
          - target:
              kind: Deployment
              name: versitygw
            patch: |
              apiVersion: apps/v1
              kind: Deployment
              metadata:
                name: versitygw
              spec:
                strategy:
                  type: RollingUpdate
                  rollingUpdate:
                    maxSurge: 0
                    maxUnavailable: 1
                template:
                  spec:
                    containers:
                      - name: versitygw
                        readinessProbe:
                          httpGet:
                            scheme: HTTPS
          - target:
              kind: PersistentVolumeClaim
              name: versitygw-data
            patch: |
              apiVersion: v1
              kind: PersistentVolumeClaim
              metadata:
                name: versitygw-data
                annotations:
                  helm.sh/resource-policy: keep
  values:
    replicaCount: 1
    image:
      tag: v1.10.0@sha256:89cad13cc981986ee284cbafea4613f9533ce6fd5f37a2c96c4c4fb8adb3a316
    serviceAccount:
      create: false
      name: versitygw
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
          - ALL
      readOnlyRootFilesystem: true
      runAsNonRoot: true
      runAsUser: 1000
      runAsGroup: 1000
    auth:
      existingSecret: versitygw-root
    gateway:
      backend:
        type: posix
        args: /mnt/data
      region: us-east-1
      corsAllowOrigin: https://s3-ui.quorate.internal
    admin:
      enabled: true
    webui:
      enabled: true
      apiGateways:
        - https://s3.quorate.internal
      adminGateways:
        - https://s3-admin.quorate.internal
    iam:
      enabled: true
      type: internal
    persistence:
      enabled: true
      create: true
      size: 200Gi
      storageClassName: openebs-zfspv-1m-zstd
      accessMode: ReadWriteOnce
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        memory: 1Gi
    nodeSelector:
      has-zfs: "true"
    tls:
      enabled: true
    certificate:
      secretName: versitygw-s3-tls