##
## Global options relating to Develocity as a whole rather than a specific subsystem.
##
#
# global:
#
#
##
## Public URL
##
#
#   hostname: ge.example.com     # Hostname used to access the web interface by web browsers, etc. Required.
#   externalSSLTermination: true # If we are using HTTPS but not with termination in the built-in ingress or proxy. Default false.
#   externalPort: 8180           # Set to specify the external port the installation is available on. Only required if differs from `ingress.port.http(s)`.
#
#
##
## Develocity license settings
##
##
#
#   license:
#     file: ABCD1234                        # Full license file content as a multiline string or Base64 data part of the license. Can also be set using --set-file global.license.file=/path/to/file
#
#
##
## Image pull settings
##
#
#   image:
#     registry: registry.example.com/gradle-enterprise # Registry to pull images from. The default is 'registry.gradle.com/develocity'.
#     tag: some-custom-tag                             # Tag to pull. Default is the Develocity version.
#     imagePullPolicy: Always                          # Default IfNotPresent.
#
#
##
## Storage settings
##
## By default Develocity will store data under /opt/gradle.
## This base directory can be configured, and separate directories for backups and logs can also be set.
##
#
#   storage:
#     directory: /mnt/big-volume/ge           # Default /opt/gradle
#     logs:
#       directory: /var/log/gradle-enterprise # Default (global.storage.directory)/logs
#     backup:
#       directory: /mnt/vol2/ge-backups       # Default (global.storage.directory)/backups
#
##
## Unattended installation
##
## These cover autoconfiguring aspects of Develocity that are controlled by the Administration section of the application.
## Contact Gradle Support for assistance with unattended installation.
## WARNING: Making changes to the unattended configuration will *overwrite* any configuration changes made in the user interface.
## See https://gradle.com/help/helm-admin-unattended-configuration for details.
##
#
#   unattended:
#    key: oijqefoijqOIQJFoijefoiqjfoij  # Encryption key for secrets in the configuration, if any. Default none.
#    configuration:
#       version: 12
#       advanced:
#         app:
#           heapMemory: 4608
#           offHeapMemory: 1024
#           params: {}
#           scanPayloadCacheSize: 2048
#         appBackgroundProcessor:
#           heapMemory: 3584
#           offHeapMemory: 1024
#           params: {}
#         distributionBroker:
#           heapMemory: 1024
#           offHeapMemory: 768
#           params: {}
#       auth:
#         anonymousPermissions:
#         - viewScan
#         - publishScan
#         external: null
#         projects:
#           acceptAnonymousProjects: true
#           enabled: false
#         roles:
#           admin:
#             assignToNewExternalUsers: false
#             description: Administer Develocity
#             displayName: Administrator
#             identityProviderAttributeValue: null
#             permissions:
#             - administerGe
#             - administerProjects
#             - administerCache
#             - generateSupportBundle
#           ci-agent:
#             assignToNewExternalUsers: false
#             description: Use Develocity for CI builds
#             displayName: CI Agent
#             identityProviderAttributeValue: null
#             permissions:
#             - publishScan
#             - testDistribution
#             - predictiveTestSelection
#             - readCache
#             - writeCache
#             - accessAllDataWithOrWithoutAssociatedProject
#             - accessDataWithoutAssociatedProject
#           developer:
#             assignToNewExternalUsers: false
#             description: Use Develocity
#             displayName: Developer
#             identityProviderAttributeValue: null
#             permissions:
#             - viewScan
#             - publishScan
#             - testDistribution
#             - predictiveTestSelection
#             - readCache
#             - readCacheWriteCas
#         scim:
#           enabled: false
#           token: null
#         timeouts:
#           accessTokenLifespan: 10
#           ssoSessionIdleTimeout: 5760
#           ssoSessionMaxLifespan: 43200
#       backups: null
#       buildCache:
#         allowUntrustedNodeSsl: false
#         storageSize: 10000
#       buildScans:
#         diskSpaceMonitoring:
#           autoDeleteWhileFreeSpaceLessThanPercentage: null
#           rejectIncomingWhileFreeSpaceLessThanPercentage: null
#           sendWarningEmailWhenFreeSpaceLessThanPercentage: null
#         incomingStorageType: null
#         keepDays: null
#       dailyMaintenanceTime: 04:00
#       edge: null
#       email: null
#       helpContact:
#         email: null
#         name: null
#       network: null
#
#       systemPassword: [SYSTEM_PASSWORD_VALUE]
##
##
## Not all settings need to be set when providing an unattended config. The following example shows how to only configure an HTTP proxy:
##
##   unattended:
##    key: oijqefoijqOIQJFoijefoiqjfoij  # Encryption key for secrets in the configuration, if any. Default none.
##    configuration:
##       version: 12
##       network:
##         additionalTrust:                          # The default is 'none'.
##         proxy:
##           protocol: https                         # The default is 'http'.
##           host: proxy.gradle.com
##           port: 8080                              # The default is '80'.
##           excludedHosts:                          # The default is empty list.
##             - some.external
##             - '*.internal'
##           auth:                                   # The default is 'none'
##             username: user
##             password: "FEIpqflj265QEFq2efq54e"
#
#
##
## Database section
##
## By default, Develocity will store data in an embedded database.
## To connect to a user-managed database, configure connection details here.
##
#
# database:
#   location: user-managed # Default "embedded"
#
#
##
## Embedded database resources and storage
##
## If using the embedded database, its resources can be configured here.
##
#
#   storage:
#     data:
#       capacity: 500Gi # Default 250Gi
#     backup:
#       capacity: 750Gi # Default 250Gi
#
#
##
## User-managed database connection details.
##
## Connection details can be set here directly or specified by a ConfigMap.
##
#
#   connection:
#     configMapName: my-example-database-connection-config-map
#     # OR
#     host: db.example.com                         # Required for user-managed database.
#     port: 5555                                   # Default 5432
#     databaseName: example_gradle_enterprise_prod # Required for user-managed database.
#     params: "?ssl=false"                         # No default.
#
##
## User-managed database credentials.
##
## Credentials details can be set here directly.
##
## Typically only a superuser account credential is required - Develocity can then create other
## necessary accounts and schemas for the app automatically.
##
## It is also possible to instead set up the database using a script and only configure the more restricted
## application account credentials here.
##
#
#   credentials:
#
#     superuser:
#       username: postgres
#       password: "superS3cret!"
#
#     # OR
#     app:
#       password: "superS3cret!"
#     migrator:
#       password: "superS3cret!"
#
##
## End database section
##
#
##
## Ingress section
##
## Develocity creates an Ingress to route traffic.
##
#
# ingress:
#
##
## Ingress SSL settings
##
## By default, the generated Ingress will have HTTPS support and use self-signed SSL certificates.
## Both of these can be changed. Certificates can be set directly here, set using
## --set-file ingress.ssl.key=keyfile --set-file ingress.ssl.cert=certfile
##
#
#   ssl:
#     enabled: false # Default true except if `global.externalSSLTermination: true`
#     # OR
#     key: |
#       -----BEGIN RSA PRIVATE KEY-----
#       MIIEpQIBAAKCAQEA4qV8JlqDMi7y85Ykq8dn7uIsi609D6KuFtlc+UvNYjatz0+u
#       ...
#       G7tI0qQ6F20e5R4tPpEDKCFZykyvgGMhfLzsvVlrgaVW8QbVK4YWNtQ=
#       -----END RSA PRIVATE KEY-----
#     cert: |
#       -----BEGIN CERTIFICATE-----
#       MIIDKjCCAhKgAwIBAgIRAPNTIHf6/oUuzMKm3ffGNOgwDQYJKoZIhvcNAQELBQAw
#       ..
#       z+P5RmRxU/kaaFB+Vuw1pRezbaAtZNorVgXnBwrdseY4zLGyhAcGcR9v+VtCiQ==
#       -----END CERTIFICATE-----
#
#
##
## Ingress TCP ports
##
## The ports that the application accepts traffic on can be altered from the default of 443 (or 80 if
## accepting plain HTTP):
##
#
#   port:
#     http: 8080  # default 80
#     https: 8443 # default 443
#
#
##
## End ingress section
##
#
##
##
## Enterprise app section
##
##
# enterprise:
#   bazel:
##    Used to configure access to a non-Develocity Bazel cache for use by Bazel Build Scans.
#     remoteCacheConnection:
##      Can be either GRPC or GRPCS.
#       url: grpc://cache.example.com:9090
#       authType: bearerToken # The default is 'none'.
##      There should only be one block under this
#       auth:
#         tls:
#           cert: |-
#             -----BEGIN CERTIFICATE-----
#             MIIDKjCCAhKgAwIBAgIRAPNTIHf6/oUuzMKm3ffGNOgwDQYJKoZIhvcNAQELBQAw
#             ..
#             z+P5RmRxU/kaaFB+Vuw1pRezbaAtZNorVgXnBwrdseY4zLGyhAcGcR9v+VtCiQ==
#             -----END CERTIFICATE-----
#           key: |-
#             -----BEGIN RSA PRIVATE KEY-----
#             MIIEpQIBAAKCAQEA4qV8JlqDMi7y85Ykq8dn7uIsi609D6KuFtlc+UvNYjatz0+u
#             ...
#             G7tI0qQ6F20e5R4tPpEDKCFZykyvgGMhfLzsvVlrgaVW8QbVK4YWNtQ=
#             -----END RSA PRIVATE KEY-----
#         bearerToken:
#           token: ar3rgsdgggsafrertregrgrbgvrb
##
## End enterprise app section
##
#
#
#
## Authentication broker section
##
# authenticationBroker:
#   adminPassword:
#     value: "superS3cret!"
#   clientSecret:
#     value: "superS3cret!"
#
##
## End authentication broker section
#
##
## Monitoring section
##
## Controls the monitoring components (capturing logs and Prometheus metrics) of Develocity.
##
#
# monitoring:
#   enabled: false               # The default is 'true'. Controls all components of the monitoring.
#
#   metrics:
#     enabled: false             # The default is 'true'. Controls the metrics components of the monitoring.
#
#   logging:
#     enabled: false             # The default is 'true'. Controls the logging components of the monitoring
#
#
##
## End monitoring section
##
#
##
## Object Storage section
##
## If no Object Storage provider is specified, `embedded` Object Storage is used by default.
##
#
# objectStorage:
#   type: "embedded" # Supported values: `embedded`, `s3`, `googleCloudStorage`, `azureBlobStorage`.
#                    # Default: `embedded`.
#
#   embedded:
#
#     storage:            # Storage configuration for each subcomponent using the embedded Object Storage.
#                         # Capacities are by default configured using the Gi unit, and all must use the same Unit.
#       internalBuffer:
#         capacity: 5Gi   # Internal buffer storage space used by the embedded Object Storage.
#                         # Default set to 5Gi, should be adjusted if the customer-support team
#                         # recommends it.
#       buildCache:
#         capacity: 10Gi  # Capacity offered to the data hosted for the build-cache feature.
#                         # Default set to 10Gi.
#
#       monitoring:
#         capacity: 20Gi  # Capacity offered to the data hosted for the monitoring component.
#                         # Default set to 20Gi.
#
#     credentials:
#       app:
#         password: "my-embedded-app-password"
#       migrator:
#         password: "my-embedded-migrator-password"
#       superuser:
#         password: "my-embedded-superuser-password"
#
#   s3:                                            # This block configures the connection and location where `build-scan` and `build-cache` data are stored.
#     bucket: "develocity-application-data"        # Bucket used for `build-scan` and `build-cache` data.
#     region: "aws-region"                         # Region used for `build-scan` and `build-cache` data.
#     # OR
#     endpoint: "https://my-s3-endpoint.aws.com"   # Endpoint used for `build-scan` and `build-cache` data.
#     credentials:
#       type: <instanceProfile | keys>             # Authentication method you will use for Object Storage Connection.
#                                                  # * `instanceProfile` leverages role associated to the EC2 instance.
#                                                  # * `keys` uses a combo of `accessKey` and `secretKey`.
#                                                  # This required value specifies the authentication configuration block you must provide.
#       keys:
#         accessKey: "my-s3-access-key"
#         secretKey: "my-s3-secret-key"
#
#     advancedParams:                              # List of advanced parameters used to fine-tune the client library.
#                                                  # You should only configure advanced parameters if you have been directed to do so by Develocity support.
#       client.maxConcurrency: 200
#       client.useCrt: "true"
#       presignedUrl.enabled: "true"
#       presignedUrl.expiresAfter: "PT5M"
#
#     monitoring:                                  # This mandatory block configures the connection and location where `monitoring` data are stored.
#                                                  # Those values can be the same as `objectStorage.s3` to share the same bucket
#                                                  # and credentials, or different if you want to separate application data (build cache, build scans)
#                                                  # from monitoring data (metrics).
#
#       bucket: "develocity-monitoring-data"       # Bucket used for `monitoring` data, stored by the `monitoring` component.
#       region: "aws-region"                       # Region used for `monitoring` data.
#       # OR
#       endpoint: "https://my-s3-endpoint.aws.com" # Endpoint used for `monitoring` data, stored by the `monitoring` component.
#
#       credentials:
#         type: <instanceProfile | keys>           # Authentication method you will use for Object Storage Connection.
#                                                  # * `instanceProfile` leverages role associated to the EC2 instance.
#                                                  # * `keys` uses a combo of `accessKey` and `secretKey`.
#                                                  # This required value specifies the authentication configuration block you must provide.
#         keys:
#           accessKey: "my-s3-monitoring-access-key"
#           secretKey: "my-s3-monitoring-secret-key"
#
#                                                  # advancedParams cannot be configured in the monitoring block.
#
#   googleCloudStorage:                            # This block configures the connection and location where `build-scan` and `build-cache` data are stored.
#     bucket: "develocity-application-data"        # Bucket used for `build-scan` and `build-cache` data.
#
#     credentials:
#       type: <gceServiceAccount | serviceAccount> # Authentication method you will use for Object Storage Connection.
#                                                  # * `gceServiceAccount` leverages the service-account attached to your Google Compute Engine instance.
#                                                  # * `serviceAccount` uses the service account key JSON file.
#                                                  # This required value specifies the authentication configuration block you must provide.
#
#       serviceAccount:                            # The content of the service account key JSON file.
#         key: "my-google-cloud-storage-service-account-json-file"
#
#     advancedParams:                              # List of advanced parameters used to fine-tune the client library.
#                                                  # You should only configure advanced parameters if you have been directed to do so by Develocity support.
#       blockSize: "8000000"
#       maxConcurrency: 5
#       presignedUrl.enabled: "true"
#       presignedUrl.expiresAfter: "PT5M"
#
#     monitoring:                                    # This mandatory block configures the connection and location where `monitoring` data are stored.
#                                                    # Those values can be the same as `objectStorage.googleCloudStorage` to share the same bucket
#                                                    # and credentials, or different if you want to separate application data (build cache, build scans)
#                                                    # from monitoring data (metrics).
#
#       bucket: "develocity-monitoring-data"         # Bucket used for `monitoring` data, stored by the `monitoring` component.
#       credentials:
#         type: <serviceAccount>                     # Authentication method used for Object Storage, where `monitoring` data are stored.
#                                                    # * `serviceAccount` uses the service account key JSON file.
#                                                    # This required value specifies the authentication configuration block you must provide.
#
#         serviceAccount:                            # The content of the service account key JSON file.
#           key: "my-google-cloud-storage-service-account-json-file-for-monitoring"
#
#                                                    # advancedParams cannot be configured in the monitoring block.
#
#   azureBlobStorage:                                    # This block configures the connection and location where `build-scan` and `build-cache` data are stored.
#     container: "develocity-application-data"           # Container used for `build-scan` and `build-cache` data.
#
#     credentials:
#       type: <accountInformation>                       # Authentication method you will use for Object Storage Connection, where `build-scan` and `build-cache` data are stored.
#                                                        # * `accountInformation` uses a combo of `accountName` and `accountKey`.
#                                                        # This required value specifies the authentication configuration block you must provide.
#
#       accountInformation:                              # The `accountKey` and `accountName` of the Azure Blob Storage account.
#         accountName: "my-azure-account-name"
#         accountKey: "my-azure-account"
#         endpointSuffix: "my-azure-endpoint-suffix"     # The endpoint suffix, default is `core.windows.net`.
#
#     advancedParams:                                    # List of advanced parameters used to fine-tune the client library.
#                                                        # You should only configure advanced parameters if you have been directed to do so by Develocity support.
#       blockSize: "8000000"
#       maxConcurrency: 5
#
#     monitoring:                                             # This mandatory block configures the connection and location where `monitoring` data are stored.
#                                                             # Those values can be the same as `objectStorage.azureBlobStorage` to share the same bucket
#                                                             # and credentials, or different if you want to separate application data (build cache, build scans)
#                                                             # from monitoring data (metrics).
#
#       container: "develocity-monitoring-data"               # Container used for `monitoring` data, stored by the `monitoring` component.
#
#       credentials:
#         type: <accountInformation>                          # Authentication method used for Object Storage, where `monitoring` data are stored.
#                                                             # * `accountInformation` uses a combo of `accountName`, `accountKey`.
#                                                             # This required value specifies the authentication configuration block you must provide.
#
#         accountInformation:                                 # The account information of the Azure Blob Storage account.
#           accountName: "my-azure-account-name"              # The account name.
#           accountKey: "my-azure-account-key"                # The account key.
#           endpointSuffix: "my-azure-endpoint-suffix"        # The endpoint suffix, default is `core.windows.net`.
#
#                                                             # advancedParams cannot be configured in the monitoring block.
##
## End objectStorage section
##
#
#
##
## Access control section
##
## Develocity will use a set of access control policies that are secure by default.
## The settings can be customized to better match your organization's policies.
##
#
# accessControl:
#   accessKeys:
#     maxLifespan:     # Policy for requiring access key expiration; can be disabled
#       enabled: false # Whether the maximum access key lifespan policy should be enabled; default true
#       duration: P30D # The maximum access key lifespan to allow when the policy is enabled; ISO 8601 duration with default of "P365D" (365 days)
#
##
## End access control section
##
#
