# GitLab CE - Foxhunt deployment
# Runs on dedicated 'gitlab' node pool (DEV1-L)
# External Postgres + Redis on services pool

global:
  edition: ce
  hosts:
    domain: fxhnt.ai
    gitlab:
      name: git.fxhnt.ai
      https: true
    registry:
      name: git.fxhnt.ai
    https: true
  ingress:
    enabled: false
    configureCertmanager: false
  shell:
    port: 2222
  psql:
    host: postgres.foxhunt.svc.cluster.local
    port: 5432
    database: gitlab
    username: gitlab
    password:
      secret: gitlab-secrets
      key: db-password
  redis:
    host: redis.foxhunt.svc.cluster.local
    port: 6379
    auth:
      enabled: false
  minio:
    enabled: false
  registry:
    bucket: foxhunt-gitlab-registry
  appConfig:
    lfs:
      bucket: foxhunt-gitlab-artifacts
      connection:
        secret: gitlab-s3-credentials
        key: connection
    artifacts:
      bucket: foxhunt-gitlab-artifacts
      connection:
        secret: gitlab-s3-credentials
        key: connection
    uploads:
      bucket: foxhunt-gitlab-artifacts
      connection:
        secret: gitlab-s3-credentials
        key: connection
    packages:
      bucket: foxhunt-gitlab-artifacts
      connection:
        secret: gitlab-s3-credentials
        key: connection
    gitlab_kas:
      enabled: false

# Disable bundled databases — use external
postgresql:
  install: false
redis:
  install: false

# Disable components we don't need
installCertmanager: false
certmanager:
  installCRDs: false
nginx-ingress:
  enabled: false
prometheus:
  install: true
  rbac:
    create: true
  alertmanager:
    enabled: false
  server:
    nodeSelector:
      k8s.scaleway.com/pool-name: gitlab
    tolerations:
      - key: gitlab
        operator: Equal
        value: "true"
        effect: NoSchedule
    persistentVolume:
      enabled: false
    resources:
      requests:
        cpu: 100m
        memory: 512Mi
      limits:
        cpu: 500m
        memory: 1Gi
    # remote_write to Cockpit — pass secrets via --set at install time:
    #   --set "prometheus.server.remoteWrite[0].url=<metrics_push_url>"
    #   --set "prometheus.server.remoteWrite[0].headers.X-Token=<push_token>"
    remoteWrite:
      - url: "COCKPIT_METRICS_PUSH_URL"
        headers:
          X-Token: "COCKPIT_PUSH_TOKEN"
gitlab-runner:
  install: false

# Registry — S3-backed
registry:
  replicaCount: 1
  hpa:
    minReplicas: 1
    maxReplicas: 1
  storage:
    secret: gitlab-s3-credentials
    key: registry
  nodeSelector:
    k8s.scaleway.com/pool-name: gitlab
  tolerations:
    - key: gitlab
      operator: Equal
      value: "true"
      effect: NoSchedule

# GitLab core components — all on gitlab node pool
gitlab:
  webservice:
    replicaCount: 1
    hpa:
      minReplicas: 1
      maxReplicas: 1
    workerProcesses: 2
    workhorse:
      extraArgs: "-apiLimit 0 -apiQueueLimit 0"
    nodeSelector:
      k8s.scaleway.com/pool-name: gitlab
    tolerations:
      - key: gitlab
        operator: Equal
        value: "true"
        effect: NoSchedule
    resources:
      requests:
        cpu: 500m
        memory: 2Gi
      limits:
        cpu: 2000m
        memory: 4Gi
    extraEnv:
      REDIS_URL: "redis://redis.foxhunt.svc.cluster.local:6379/8"

  sidekiq:
    replicas: 1
    hpa:
      minReplicas: 1
      maxReplicas: 1
    concurrency: 10
    nodeSelector:
      k8s.scaleway.com/pool-name: gitlab
    tolerations:
      - key: gitlab
        operator: Equal
        value: "true"
        effect: NoSchedule
    resources:
      requests:
        cpu: 250m
        memory: 1Gi
      limits:
        cpu: 1000m
        memory: 2Gi
    extraEnv:
      REDIS_URL: "redis://redis.foxhunt.svc.cluster.local:6379/8"

  gitaly:
    persistence:
      enabled: true
      size: 50Gi
    nodeSelector:
      k8s.scaleway.com/pool-name: gitlab
    tolerations:
      - key: gitlab
        operator: Equal
        value: "true"
        effect: NoSchedule
    resources:
      requests:
        cpu: 200m
        memory: 512Mi
      limits:
        cpu: 1000m
        memory: 2Gi

  gitlab-shell:
    replicaCount: 1
    hpa:
      minReplicas: 1
      maxReplicas: 1
    nodeSelector:
      k8s.scaleway.com/pool-name: gitlab
    tolerations:
      - key: gitlab
        operator: Equal
        value: "true"
        effect: NoSchedule
    service:
      type: NodePort
      nodePort: 32222

  toolbox:
    backups:
      objectStorage:
        config:
          secret: gitlab-s3-credentials
          key: connection
    nodeSelector:
      k8s.scaleway.com/pool-name: gitlab
    tolerations:
      - key: gitlab
        operator: Equal
        value: "true"
        effect: NoSchedule

  kas:
    enabled: false
    hpa:
      minReplicas: 0
      maxReplicas: 0

  gitlab-exporter:
    enabled: false