# -*- mode: yaml -*-

replicaCount: 1

image:
  repository: docker.io/rbkmoney/machinegun
  tag: 54eff8de6e39b1102f1eafb44b6a5ce3eab6e9a2
  pullPolicy: IfNotPresent

configMap:
  data:
    config.yaml: |
      {{- tpl (readFile "config.yaml.gotmpl") . | nindent 6 }}

secret:
  data:
    cookie: "SomeV3ryRand0mStringForCoock1e"

volumes:
  - name: config-volume
    configMap:
      name: {{ .Release.Name }}
  - name: cookie-secret
    secret:
      secretName: {{ .Release.Name }}

volumeMounts:
  - name: config-volume
    mountPath: /opt/machinegun/etc/config.yaml
    subPath: config.yaml
    readOnly: true
  - name: cookie-secret
    mountPath: /opt/machinegun/etc/cookie
    subPath: cookie
    readOnly: true

metrics:
  serviceMonitor:
    enabled: true
    namespace: {{ .Release.Namespace }}
    additionalLabels:
      release: prometheus

ciliumPolicies:
  - filters:
    - port: 8500
      type: TCP
    name: consul
    namespace: {{ .Release.Namespace }}
  - filters:
    - port: 9092
      rules:
        kafka:
        - role: produce
          topics:
            - mg-events-cashreg
            - mg-events-customer
            - mg-events-ff-deposit
            - mg-events-ff-destination
            - mg-events-ff-identity
            - mg-events-ff-p2p-template
            - mg-events-ff-p2p-transfer
            - mg-events-ff-p2p-transfer-session
            - mg-events-ff-source
            - mg-events-ff-w2w-transfer
            - mg-events-ff-wallet
            - mg-events-ff-withdrawal
            - mg-events-ff-withdrawal-session
            - mg-events-invoice
            - mg-events-invoice-template
            - mg-events-party
            - mg-events-rates
            - mg-events-recurrent-paytools
            - mg-events-schedulers
      type: TCP
    name: kafka
    namespace: {{ .Release.Namespace }}
  - filters:
    - port: 8087
      type: TCP
    name: riak
    namespace: {{ .Release.Namespace }}
  - filters:
    - port: 8022
      type: TCP
    name: bender
    namespace: {{ .Release.Namespace }}
  - filters:
    - port: 8022
      type: TCP
    name: url-shortener
    namespace: {{ .Release.Namespace }}
  - filters:
    - port: 8022
      type: TCP
    name: machinegun
    namespace: {{ .Release.Namespace }}
  - filters:
    - port: 8022
      type: TCP
    name: dominant
    namespace: {{ .Release.Namespace }}
  - filters:
    - port: 8022
      type: TCP
    name: hellgate
    namespace: {{ .Release.Namespace }}