# The one TerdutServer this whole demo runs against. Everything else in
# this directory (teams, escalation rules, dead man's switches, alert
# sources) references it by name.
#
# networking.hostname is accepted but not yet acted on: creating the
# HTTPRoute for it isn't implemented yet (api/v1alpha1/terdutserver_types.go,
# NetworkingSpec's own doc comment) -- this TerdutServer is reachable from
# outside the cluster only by port-forwarding its Service, same name as
# this object (see README.md).
apiVersion: terdut.ryuvia.com/v1alpha1
kind: TerdutServer
metadata:
  name: terdut-demo
spec:
  image:
    repository: git.ryuvia.com/niklas/terdut-server
    tag: v0.33.2
  replicas: 1
  networking:
    hostname: terdut-demo.example
    servicePort: 8080
  database:
    dsn: "postgres://terdut@terdut-demo-postgres:5432/terdut?sslmode=disable"
    passwordSecretRef:
      name: terdut-demo-postgres
      key: password
  sweeper:
    staleAfter: 6h
    archiveAfter: 168h
  # No oidc block: password login only, so there's nothing external to
  # register a redirect URI with before this demo can sign in.
  passwordLogin: true