-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathvalues-dev.yaml
More file actions
132 lines (121 loc) · 2.84 KB
/
Copy pathvalues-dev.yaml
File metadata and controls
132 lines (121 loc) · 2.84 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
# values-dev.yaml — single-node / k3d / kind preset.
#
# install:
# helm dep update deploy/helm/af-stack
# helm install af-stack deploy/helm/af-stack -f deploy/helm/af-stack/values-dev.yaml
#
# Trade-offs vs production:
# - In-chart Postgres + MinIO (no managed services required)
# - emptyDir storage for the sub-charts (data lost on pod restart)
# - Single replica each, autoscaling off
# - NetworkPolicy off (k3d/kind don't ship with a controller by default)
# - PDB off (a single replica can't satisfy minAvailable=1 during voluntary disruption)
# - traefik ingress class (k3d's default)
# - multi-tenancy off (simpler dev experience; flip on for tenant tests)
replicaCount:
runtime: 1
dashboard: 1
autoscaling:
runtime:
enabled: false
dashboard:
enabled: false
podDisruptionBudget:
runtime:
enabled: false
dashboard:
enabled: false
networkPolicy:
enabled: false
ingress:
enabled: true
className: traefik
annotations: {}
hosts:
- host: af-stack.localtest.me # resolves to 127.0.0.1, perfect for k3d
paths:
- path: /api
pathType: Prefix
service: runtime
- path: /openapi.json
pathType: Exact
service: runtime
- path: /health
pathType: Exact
service: runtime
- path: /ready
pathType: Exact
service: runtime
- path: /
pathType: Prefix
service: dashboard
tls: []
postgresql:
enabled: true
auth:
username: afstack
password: afstack
database: afstack
primary:
persistence:
enabled: false # emptyDir — restart loses data
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
mode: minio
minio:
enabled: true
auth:
rootUser: minio
rootPassword: minio-secret
defaultBuckets: "af-stack"
persistence:
enabled: false
size: 1Gi
resources:
requests:
cpu: 50m
memory: 128Mi
modules:
multiTenancy:
enabled: false
sandbox:
enabled: false
adapter: noop
llmGateway:
enabled: true
llmCache:
enabled: false
memory:
enabled: true
billing:
enabled: false
notifications:
enabled: false
webhooks:
enabled: false
# Dev-only inline secrets. NEVER commit real values; use a values-secret.yaml
# excluded from git for anything you care about.
secrets:
kmsKey: "dev-kms-key-change-me-0000000000000000000000000000000000000000"
authSecret: "dev-auth-secret-change-me-0000000000000000000000000000000000"
llm:
# Set via --set llm.openrouterApiKey=... or a values-secret.yaml.
openrouterApiKey: ""
resources:
runtime:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 1Gi
dashboard:
requests:
cpu: 50m
memory: 128Mi
limits:
cpu: 300m
memory: 512Mi