secrets:
  databaseSecretRef: null
  oidcSecretRef: null

ingress:
  clusterIssuer: "letsencrypt-issuer"
  domain: null

urlaubsverwaltung:
  # The official image is built with Cloud Native Buildpacks and runs as the
  # non-root cnb user (uid 1002, gid 1001). /tmp is a writable emptyDir for
  # the JVM's temp/work files.
  securityContext:
    pod:
      runAsNonRoot: true
      runAsUser: 1002
      runAsGroup: 1001
    container:
      allowPrivilegeEscalation: false
      readOnlyRootFilesystem: true
      runAsNonRoot: true
      capabilities:
        drop:
          - ALL
  resources:
    # Limits are optional: memory and ephemeral-storage limits default to
    # limitFactor x the request, an explicitly set limit always wins, and a
    # CPU limit is only set when configured explicitly under "limits".
    limitFactor: 3
    requests:
      cpu: 0.1
      memory: 768Mi
      ephemeralStorage: 10Mi