How to Deploy Axual Connect

axual:
  tenant: &tenant "<tenant-short-name>"
  instance: &instance "<instance-short-name>"
  environment: "<environment-short-name>"
  applicationId: "_<application-short-name>"
  applicationVersion: "1.0.0"
  # Do not use Discovery API, but static configs
  staticConfig:
    tenant: *tenant
    instance: *instance
    cluster: "<cluster-name>"
    # If connect is running in the same Kubernetes cluster we can just use the internal service url as well.
    bootstrapServers: "bootstrap-kafka.<domain>:443"
    schema.registry.url: "https://apicurio.<domain>"
    enable.value.headers: "false"
    group.id.resolver: "io.axual.common.resolver.GroupPatternResolver"
    group.id.pattern: "{tenant}-{instance}-{environment}-{group}"
    topic.resolver: "io.axual.common.resolver.TopicPatternResolver"
    topic.pattern: "{tenant}-{instance}-{environment}-{topic}"
    transactional.id.resolver: "io.axual.common.resolver.TransactionalIdPatternResolver"
    transactional.id.pattern: "{tenant}-{instance}-{environment}-{transactional.id}"
  tls:
    clientEnabled: true
    serverEnabled: false
    automatedKeystores: true
    createClientKeypairSecret: false
    clientKeypairSecretName: "axual-connect-cert-secret"
    clientKeypairSecretCertName: "tls.crt"
    clientKeypairSecretKeyName: "tls.key"
    createTruststoreCaSecret: false
    truststoreCaSecretName: "my-external-ca"
  
  basicAuth:
    enabled: true
    username: "axual"
    password: "password!"

persistPlugins:
  enabled: false
  createPersistentVolume: false

downloadPlugins:
  enabled: true
  artificateBaseUrl: "https://stpaxualconnect.blob.core.windows.net"
  connectPluginsFile: "dizzl-0eafdac8/dizzl-axual-connect-plugins-2.0.0.tgz"
  commonResourcesFile: "dizzl-0eafdac8/dizzl-axual-connect-common-2.0.0.tgz"
  resourcePath: "/usr/share"
  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:   
      memory: 2Gi

configurationOverrides:
  "plugin.path": "/usr/share/plugins"
  "plugin.discovery": "SERVICE_LOAD"


# Vault Configuration
vault:
  address: "http://axual-governance-platform-manager-vault.axual.svc.cluster.local:8200"
  authMethod: APPROLE
  approleRoleId: "987d4b9f-a0b7-ac36-afab-6ab1f597e149"
  approleSecretId: "20b5bfaa-7d97-a0c2-fcfb-6f8f43718533"
  ssl:
    verify: true
  secretProvider:
    enabled: true
    class: io.axual.utilities.config.providers.VaultConfigProvider
  keystoreProvider:
    enabled: true
    class: io.axual.utilities.config.providers.VaultKeyStoreProvider
    truststorePassword: notsecret
    certificateChainKeyname: certificate.chain
    privateKeyKeyname: private.key

# Init Resouce Configuration
keystoreProvider:
  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      memory: 256Mi

kafkaInitContainer:
  # -- Enable topic and ACL creation
  enabled: true
  # If connect is running in the same Kubernetes cluster we can just use the internal service url as well.
  bootstrapServers: "SSL://bootstrap-kafka.<domain>:443"
  # -- min.isr of topics used to store connect state/offset/config
  minIsr: "1"
  # -- Replication factor of topics used to store connect state/offset/config
  replicationFactor: "1"
  # -- Principal common name used to produce and consume from connect state/offset/config topics (should match the one on axual.tls.clientKeystore)
  principal: "User:CN=Connect client"
  tls:
    # -- Existing Keypair secret name
    keypairSecretName: "server-cert-secret"
    # -- Existing Keypair key name
    keypairSecretKeyName: "tls.key"
    # -- Existing Keypair certificate name
    keypairSecretCertName: "tls.crt"
    # -- Existing Truststore secret name
    truststoreCaSecretName: "my-external-ca"
    # -- Existing Truststore certificate name
    truststoreCaSecretCertName: "ca.crt"
  # -- The [resource requirements](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/) for this container.
  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      memory: 256Mi

# configuration values for RoutingKafkaAppender
routedLogging:
  # indicates if we add the routing Kafka appender to the Logback config
  enabled: false
  # indicates if we take Axual environment in consideration when routing connector logging
  suppressEnvironment: false
  pattern: '%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] %-5level %logger{36} %msg'
  enableHostnameVerification: true
  debugMode: false

securityContext:
  { }

additionalWorkerConfig:
  { }

podLabels: {}

connect-vault:
  enabled: true
  ui:
    enabled: true
    serviceType: "LoadBalancer"
    externalPort: 8200
  server:
    dataStorage:
      storageClass: "hostpath"
  injector:
    enabled: false