values.yaml

replicaCount: 1

image:
  repository: ghcr.io/kubestellar/console
  pullPolicy: IfNotPresent
  tag: ""  # Defaults to chart appVersion

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  create: true
  automount: true
  annotations: {}
  name: ""

# RBAC configuration
# When deployed in-cluster without the kc-agent, the console uses
# its ServiceAccount for read-only cluster access + ResourceQuota CRUD
rbac:
  create: true

podAnnotations: {}
podLabels: {}

podSecurityContext: {}

securityContext: {}

service:
  type: ClusterIP
  port: 8080

ingress:
  enabled: false
  className: ""
  annotations: {}
  hosts:
    - host: console.local
      paths:
        - path: /
          pathType: Prefix
  tls: []

# OpenShift Route (alternative to Ingress)
route:
  enabled: false
  host: ""
  tls:
    termination: edge
    insecureEdgeTerminationPolicy: Redirect

resources:
  limits:
    cpu: 500m
    memory: 512Mi
  requests:
    cpu: 100m
    memory: 128Mi

# GitHub OAuth configuration
github:
  clientId: ""
  clientSecret: ""
  # Alternatively, use existing secret
  existingSecret: ""
  existingSecretKeys:
    clientId: github-client-id
    clientSecret: github-client-secret

# GitHub token for server-side API access (nightly E2E status, etc.)
githubToken:
  token: ""
  existingSecret: ""
  existingSecretKey: github-token

# Google Drive API key for benchmark data
googleDrive:
  apiKey: ""
  existingSecret: ""
  existingSecretKey: google-drive-api-key
  folderId: "1r2Z2Xp1L0KonUlvQHvEzed8AO9Xj8IPm"

# Claude AI configuration (optional)
claude:
  apiKey: ""
  model: "claude-sonnet-4-20250514"
  existingSecret: ""
  existingSecretKey: claude-api-key

# AI Mode configuration
# Controls how aggressively the AI suggests card changes and analyzes data
# low: Minimal token usage, AI only for explicit requests
# medium: Balanced - AI for analysis/summaries on request
# high: Full AI assistance with proactive suggestions
ai:
  defaultMode: "medium"  # low | medium | high
  # Token usage limits (per user per month)
  tokenLimits:
    enabled: true
    monthlyLimit: 100000  # Max tokens per user per month
    warningThreshold: 80  # Percentage at which to show warning
    criticalThreshold: 95 # Percentage at which to restrict AI features

# JWT configuration
# A random JWT secret is auto-generated if left empty.
# To provide your own, set jwt.secret or use an existing Kubernetes secret.
jwt:
  secret: ""
  existingSecret: ""
  existingSecretKey: jwt-secret

# Database configuration
database:
  type: sqlite
  sqlitePath: /app/data/console.db

# Persistence for SQLite
persistence:
  enabled: true
  size: 1Gi
  storageClass: ""
  accessModes:
    - ReadWriteOnce

# kubestellar binaries configuration
kubestellar:
  opsPath: /usr/local/bin/kubestellar-ops
  deployPath: /usr/local/bin/kubestellar-deploy

# Sidebar dashboard filter (comma-separated dashboard IDs, empty = show all)
# Available IDs: dashboard, clusters, deploy, ai-ml, ai-agents, ci-cd, alerts,
#   arcade, compliance, compute, cost, data-compliance, deployments, events,
#   gitops, gpu-reservations, helm, llm-d-benchmarks, logs, network, nodes,
#   operators, pods, security, security-posture, services, storage, workloads
# Example: "gpu-reservations,llm-d-benchmarks"
enabledDashboards: ""

nodeSelector: {}

tolerations: []

affinity: {}

# Additional environment variables
extraEnv: []