---
become_override: False
ocp_username: opentlc-mgr
silent: False

# Default variables. Overwrite with a dictionary
# ocp4_workload_quay_operator_vars

ocp4_workload_quay_operator_defaults:
  project: quay-enterprise
  project_display: Red Hat Quay Registry
  name: quay

  # Quay starting CSV. Leave empty for current CSV
  # starting_csv: "quay.v1.0.2"
  starting_csv: ""

  # Verify successful deployment
  verify_deployment: true

  # Image tag for Quay and Clair. Usually the same but can be set differently
  quay_image_tag:  "v3.2.0"
  clair_image_tag: "v3.2.0"

  # Enable Clair
  clair_enabled: True
  # Clair Update Interval (Default 6h)
  clair_update_interval: "10m"

  # Quay Route. Should be overwritten
  route: ""

  # Quay Superuser
  superuser_username: quayadmin
  superuser_email: rhpds-admins@redhat.com
  # Super User Password needs to be at least 8 characters
  # Will be generated with 12 random ascii characters if not defined
  #superuser_password: ""

  # Quay Config Password (username is always 'quayconfig'):
  config_app_password: quayconfig

  # Resources for Quay Database
  quay_db_volume_size: 10Gi
  quay_db_cpu_request: "100m"
  quay_db_cpu_limit: "100m"
  quay_db_memory_request: "128Mi"
  quay_db_memory_limit: "128Mi"

  # Resources for Clair Database
  clair_db_cpu_request: "100m"
  clair_db_cpu_limit: "100m"
  clair_db_memory_request: "128Mi"
  clair_db_memory_limit: "128Mi"

  # Resources for Quay
  quay_volume_size: 15Gi
  quay_cpu_request: "1"
  quay_cpu_limit: "2"
  quay_memory_request: "6Gi"
  quay_memory_limit: "6Gi"

  # Resources for Clair
  clair_cpu_request: "200m"
  clair_cpu_limit: "500m"
  clair_memory_request: "1Gi"
  clair_memory_limit: "1Gi"

  # Resources for Redis
  redis_cpu_request: "100m"
  redis_cpu_limit: "100m"
  redis_memory_request: "128Mi"
  redis_memory_limit: "128Mi"

  # Resources for Quay Config Pod
  config_cpu_request: "400m"
  config_cpu_limit: "400m"
  config_memory_request: "512Mi"
  config_memory_limit: "512Mi"

  # Certificates
  # Pass these certificates. Otherwise the role will try to determine if
  # the bastion has usable certificates (from the ocp4-workload-enable-letsencrypt role) in
  # $HOME/certificates and use those.
  ssl_certificate: ""
  ssl_key: ""

# Access Credentials for Quay.io to pull Red Hat Quay
# Should be overwritten via base64 encoded Global Variables !!!
# reference https://access.redhat.com/solutions/3533201
# ocp4_workload_quay_operator_secrets:
#   quay_dockerconfigjson: 'pull_secret'

# Internal variables. Don't set or change
ocp4_workload_quay_operator_quay_route: ""
ocp4_workload_quay_operator_superuser_password: ""
ocp4_workload_quay_operator_ssl_certificate: ""
ocp4_workload_quay_operator_ssl_key: ""