sourceRef:
  kind: OCIRepository
  name: cozystack-packages
  namespace: cozy-system
migrations:
  image: ghcr.io/cozystack/cozystack/platform-migrations:latest@sha256:390dff1ac16d99c7677a2b580e0dc41bcb2ffd50232ddf4adff81d6f86aae70b
  targetVersion: 23
# Bundle deployment configuration
bundles:
  system:
    type: "full" # "hosted", or "minimal"
  iaas:
    enabled: true
  paas:
    enabled: true
  naas:
    enabled: true
# Infrastructure components configuration
# Enable or disable specific components and provide custom values
#components:
#  metallb:
#    enabled: false
#  hetzner-robotlb:
#    enabled: true
#  cilium:
#    enabled: true
#    values:
#      k8sServiceHost: ""
#      k8sServicePort: 6443
components: {}
# Network configuration
networking:
  clusterDomain: "cozy.local"
  podCIDR: "10.244.0.0/16"
  podGateway: "10.244.0.1"
  serviceCIDR: "10.96.0.0/16"
  joinCIDR: "100.64.0.0/16"
# Service publishing and ingress configuration
publishing:
  host: "example.org"
  ingressName: tenant-root
  exposedServices:
    - api
    - dashboard
    - vm-exportproxy
    - cdi-uploadproxy
  apiServerEndpoint: "" # example: "https://api.example.org"
  externalIPs: []
  certificates:
    issuerType: http01 # "http01" or "cloudflare"
# Authentication configuration
authentication:
  oidc:
    enabled: false
    dashboard:
      extraRedirectUris: []
# Pod scheduling configuration
scheduling:
  topologySpreadConstraints: []
# UI branding configuration
branding:
  dashboard: {}
  keycloak: {}
# Container registry mirrors configuration
#
# Example:
# registries:
#   mirrors:
#     docker.io:
#       endpoints:
#         - http://10.0.0.1:8082
#     ghcr.io:
#       endpoints:
#         - http://10.0.0.1:8083
#     gcr.io:
#       endpoints:
#         - http://10.0.0.1:8084
#     registry.k8s.io:
#       endpoints:
#         - http://10.0.0.1:8085
#     quay.io:
#       endpoints:
#         - http://10.0.0.1:8086
#     cr.fluentbit.io:
#       endpoints:
#         - http://10.0.0.1:8087
#     docker-registry3.mariadb.com:
#       endpoints:
#         - http://10.0.0.1:8088
#   config:
#     "10.0.0.1:8082":
#       tls:
#         insecureSkipVerify: true
registries: {}
# Resource allocation ratios
resources:
  cpuAllocationRatio: 10
  memoryAllocationRatio: 1
  ephemeralStorageAllocationRatio: 40