# minio tenant
tenant:
  tenant:
    name: s3-cusprod-prodwork01
    configuration:
      name: minio-config
    pools:
    - servers: 2
      volumesPerServer: 2
      storageClassName: hcloud-volumes
      size: 10Gi
      resources:
        limits:
          cpu: "0.3"
          memory: 400Mi
    buckets:
      - name: mysql
        region: ''
      - name: postgres
        region: ''
    users:
      - name: user1
      - name: user2
    prometheus:
      diskCapacityGB: false
    log:
      audit:
        diskCapacityGB: false
  ingress:
    api:
      enabled: true
      ingressClassName: nginx
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod
        cert-manager.io/issue-temporary-certificate: 'true'
        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
        nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
        nginx.ingress.kubernetes.io/proxy-body-size: 32m
      host: s3storage-cusprod-prodwork01.smardigo.digital
      tls:
      - secretName: s3-miniotest-cert
        hosts:
          - s3storage-cusprod-prodwork01.smardigo.digital
    console:
      enabled: true
      ingressClassName: nginx
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod
        cert-manager.io/issue-temporary-certificate: 'true'
        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
        nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
      host: s3console-cusprod-prodwork01.smardigo.digital
      tls:
      - secretName: s3-console-cert
        hosts:
          - s3console-cusprod-prodwork01.smardigo.digital

smardigo-connect:
  connect:
    domain: connect-cusprod-prodwork01.smardigo.digital
    oidc:
      client_id: cusprod-connect
      registration_id: cusprod-connect
      issuer_host: prodwork01-keycloak-01-keycloak.smardigo.digital
      realm: moebene
    iam:
      iam_module: external
      iam_client_enabled: "true"
      protocol: http
      hostname: iam.mobene-keycloak
      port: 8080

smardigo-worker:
  uba:
    enable: true
  sepa:
    enable: true
  ocr:
    enable: true