sip.yml

---
ingress:
  - name: "http-default"
    subdomain: exams
    http:
      - path: /
        port: 80
postgres:
  - name: db
s3:
  - name: files
auth:
  - name: oidc
    accessType: confidential
    clientProtocol: openid-connect
    validRedirectURIs:
      - https://exams.com.staging-sip.ethz.ch/*
    scopes:
      defaultClientScopes:
        - profile
        - home-organization
        - roles
    roles:
      - name: admin
        description: Admin of the application
env:
  - name: "RUNTIME_COMMUNITY_SOLUTIONS_SESSION_SECRET"
    secret:
      key: key
      create: random
  - name: "RUNTIME_COMMUNITY_SOLUTIONS_API_KEY"
    secret:
      key: api-key
      create: provided
  - name: "FRONTEND_GLOB_ID"
    secret:
      key: frontend-glob-id
      create: provided
  - name: "FRONTEND_TITLE_PREFIX"
    secret:
      key: frontend-title-prefix
      create: provided
  - name: "FRONTEND_TITLE_SUFFIX"
    secret:
      key: frontend-title-suffix
      create: provided
  - name: "FRONTEND_EMAIL_ADDRESS"
    secret:
      key: frontend-email-address
      create: provided
  - name: "FRONTEND_IMPRINT"
    secret:
      key: frontend-imprint
      create: provided
  - name: "FRONTEND_PRIVACY_POLICY"
    secret:
      key: frontend-privacy-policy
      create: provided
  - name: "FRONTEND_FAVICON_URL"
    secret:
      key: frontend-favicon-url
      create: provided
  - name: "RUNTIME_FRONTEND_KEYCLOAK_URL"
    value: https://auth.vseth.ethz.ch/auth
  - name: "RUNTIME_FRONTEND_KEYCLOAK_REALM"
    value: VSETH
  - name: "FRONTEND_UNLOCK_DEPOSIT_NOTICE"
    secret:
      key: frontend-unlock-deposit-notice
      create: provided
  - name: "BANNED_USERS"
    secret:
      key: banned-users
      create: provided

livenessProbe:
  httpGet:
    path: /health
    port: 80
  initialDelaySeconds: 10
  periodSeconds: 3

startupProbe:
  httpGet:
    path: /health
    port: 80
  failureThreshold: 30
  periodSeconds: 10

readinessProbe:
  httpGet:
    path: /
    port: 80
  initialDelaySeconds: 10
  periodSeconds: 3

prometheus:
  path: /metrics/
  port: 80

resources:
  limits:
    memory: 512Mi
    cpu: 500m
  requests:
    memory: 256Mi
    cpu: 250m