# yaml-language-server: $schema=./values.schema.json
image:
  repository: oci.trueforge.org/containerforge/lvm-disk-watcher
  pullPolicy: IfNotPresent
  tag: v1.1.0@sha256:a98c6fb466fae8d29693bff59946603e28e3f0d5a1ca9064ee681f4bdea64601

service:
  main:
    enabled: false
    ports:
      main:
        enabled: false

workload:
  main:
    type: DaemonSet
    podSpec:
      containers:
        main:
          env:
            NODE_NAME:
              fieldRef:
                fieldPath: spec.nodeName
          probes:
            liveness:
              enabled: false
            readiness:
              enabled: false
            startup:
              enabled: false

configmap:
  disk-config:
    enabled: true
    data:
      disk-config: |
        k8s-control-1: all

persistence:
  disk-config:
    enabled: true
    type: configmap
    objectName: disk-config
    defaultMode: "0777"
    items:
      - key: disk-config
        path: disk-config
    targetSelector:
      main:
        main:
          subPath: disk-config
          mountPath: /config/disk-config
          readOnly: true

  dev:
    enabled: true
    type: hostPath
    mountPath: /dev
    hostPath: /dev

securityContext:
  container:
    runAsUser: 0
    runAsGroup: 0
    allowPrivilegeEscalation: true
    privileged: true
    capabilities:
      drop:
        - ALL
      add:
        [
          "SYS_ADMIN",
          "MKNOD",
          "SYS_RAWIO",
          "SYS_PTRACE",
          "NET_ADMIN",
          "SYS_MODULE",
        ]
  pod:
    fsGroup: 0
    fsGroupChangePolicy: OnRootMismatch
