# CloudNativePG Operator Helm Values — Single Source of Truth
# Chart: https://github.com/cloudnative-pg/charts

# Basic operator configuration
replicaCount: 1

# CRDs must be installed (Helm default behavior)
crds:
  create: true

# Webhook configuration
webhook:
  port: 9443
  mutating:
    create: true
    failurePolicy: Fail
  validating:
    create: true
    failurePolicy: Fail

# Monitoring
# PodMonitor disabled during bootstrap (Prometheus CRDs not installed yet)
# Re-enable via ArgoCD after Prometheus stack is deployed
monitoring:
  podMonitorEnabled: false
  grafanaDashboard:
    create: false  # We'll manage dashboards via ArgoCD later

# Resource limits for operator
resources:
  requests:
    cpu: 100m
    memory: 128Mi
  limits:
    cpu: 500m
    memory: 512Mi

# Security context
securityContext:
  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: true
  runAsNonRoot: true
  runAsUser: 1000
  capabilities:
    drop:
      - ALL

# Tolerate control-plane taints
tolerations:
  - key: node-role.kubernetes.io/control-plane
    operator: Exists
    effect: NoSchedule

# Additional labels for ArgoCD adoption
commonLabels:
  app.kubernetes.io/managed-by: Helm
  argocd.argoproj.io/instance: cnpg-operator