# design.md §7b: cluster-specific values for the homelab environment.
# No secrets here — Authentik client secret etc. flow through the existing
# Vault/talos-cli pattern, referenced at deploy time, not inlined.
namespace: sqs

kafkaCluster:
  nodePool:
    replicas: 3
    storage:
      # longhorn-kafka pins numberOfReplicas to 2 to match the current
      # 2-node cluster (see kafka-cluster chart's storageclass.yaml).
      # Switch back to "longhorn" (3 replicas) once the 3rd node joins.
      class: longhorn-kafka
      # Longhorn's per-node scheduling budget on the current 2-node cluster
      # only has ~36Gi of headroom (other PVCs reserve the rest), and each
      # node hosts one replica of all 3 broker volumes, so 3 * sizeGi must
      # fit in that headroom. Revisit once the 3rd node joins.
      sizeGi: 10
    resources:
      memory: 5Gi
      cpu: "2"

redis:
  storageClass: longhorn
  memoryLimit: 1Gi

managementService:
  ingress:
    host: kmsvc.riotpiao.homelab.com
    clusterIssuer: homelab-ca
  authentikIssuerURL: "https://authentik.riotpiao.homelab.com/application/o/kafaka/"
  authentikAudience: "QI0gPtR99ar8VvhK8Tqox4SDkTKzbNU7lbgwBNSc"