image:
  repository: hello-world
  tag: latest@sha256:d000bc569937abbe195e20322a0bde6b2922d805332fd6d8a68b19f524b7d21d
  pullPolicy: IfNotPresent
manifestManager:
  enabled: true
workload:
  main:
    enabled: false
    podSpec:
      containers:
        main:
          enabled: false
          probes:
            liveness:
              enabled: false
            readiness:
              enabled: false
            startup:
              enabled: false
service:
  main:
    enabled: false
    ports:
      main:
        enabled: false
        port: 9999
portal:
  open:
    enabled: false
operator:
  cert-manager:
    namespace: cert-manager

clusterIssuer:
  selfSigned:
    enabled: true
    name: "selfsigned"
  CA: []
  #   - name: myca
  #     selfSigned: true
  #     selfSignedCommonName: "my-selfsigned-ca"
  #     # Used to manually define a CA-crt not used when selfSigned is enabled
  #     crt: ""
  #     key: ""
  #     # TODO: Add option to use SCALE CA certs

  ACME: []
#   - name: letsencrypt
#     # Used for both logging in to the DNS provider AND ACME registration
#     email: ""
#     server: 'https://acme-staging-v02.api.letsencrypt.org/directory'
#     # Used primarily for the SCALE GUI
#     customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
#     email: ""
#     # Options: HTTP01, cloudflare, route53, akamai, digitalocean, rfc2136, acmedns
#     type: ""
#     # for cloudflare
#     cfapikey: ""
#     cfapitoken: ""
#     # for route53
#     region: ""
#     accessKeyID: ""
#     route53SecretAccessKey: ""
#     # optional for route53
#     role: ""
#     # for akamai
#     serviceConsumerDomain: ""
#     akclientToken: ""
#     akclientSecret: ""
#     akaccessToken: ""
#     # for digitalocean
#     doaccessToken: ""
#     # for rfc2136
#     nameserver: ""
#     tsigKeyName: ""
#     tsigAlgorithm: ""
#     rfctsigSecret: ""
#     # for acmedns
#     name: sd
#     acmednsHost: asdf
#     # Pick one of the bellow acmednsConfig
#     acmednsConfigJson:
#     acmednsConfig:
#       - domain: ""
#         username: ""
#         password: ""
#         fulldomain: ""
#         subdomain: ""
#         allowFrom: []

clusterCertificates:
  # Namespaces in which the certificates must be available
  # Accepts comma-separated regex expressions
  # replicationNamespaces: 'ix-.*'
  certificates: []
  # - name: mycert
  #   enabled: true
  #   certificateIssuer: selfsigned
  #   hosts:
  #     - my.domain.com
  #     - '*.my.domain.com'