# Default values for trusted-certificate-issuer.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

image:
  hub: intel
  name: trusted-certificate-issuer
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""

# Any extra arguments for tcs-controller
controllerExtraArgs: {}
#controllerExtraArgs: |-
#  - --csr-full-cert-chain=false | true
#  - --key-wrap-mechanism=aes_gcm | aes_key_pad_wrap

imagePullSecrets: []

# PKCS11 PIN secrets (base64 encoded)
pkcs11:
  sopin: V0lwbUJCybc2Oc6M06Vz
  userpin: U3BnbGIyTUl3ZV9lSHUy

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations:
  sgx.intel.com/quote-provider: aesmd

podSecurityContext: {}
  # fsGroup: 2000

service:
  type: ClusterIP
  port: 8443

resources:
  limits:
    cpu: 500m
    memory: 100Mi
    sgx.intel.com/enclave: 1
    sgx.intel.com/epc: 512Ki
  requests:
    cpu: 100m
    memory: 20Mi
    sgx.intel.com/enclave: 1
    sgx.intel.com/epc: 512Ki

nodeSelector: {}

tolerations: []

affinity: {}