---
controllers:
  some-app:
    containers:
      app:
        securityContext:
          privileged: false
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: false
          capabilities:
            drop:
              - ALL
          seccompProfile:
            type: "RuntimeDefault"
        image:
          repository: some/image
          tag: latest
        args:
          - some
          - argument
        env:
          TZ: America/New_York
        probes: &probes
          liveness:
            enabled: true
          readiness:
            enabled: true
          startup:
            enabled: true
            spec:
              failureThreshold: 30
              periodSeconds: 5
        resources:
          limits:
            memory: 3Gi
          requests:
            cpu: 100m
            memory: 500Mi
    pod:
      securityContext:
        runAsUser: 568
        runAsGroup: 568
        fsGroup: 568
        fsGroupChangePolicy: "OnRootMismatch"
        runAsNonRoot: true

service:
  app:
    controller: some-app
    ports:
      http:
        port: 42069
        protocol: TCP

# -- Configure persistence settings for the chart under this key.
persistence:
  config:
    type: persistentVolumeClaim
    accessMode: ReadWriteOnce
    size: 1Gi
    globalMounts:
      - path: /data