values-west.yaml

main:
  clusterGroupName: west
  multiSourceConfig:
    enabled: true
    clusterGroupChartVersion: "0.9.*"
    helmRepoUrl: https://charts.validatedpatterns.io

clusterGroup:
  name: west
  argoCD:
    rbac:
      defaultPolicy: role:readonly
      policy: |
        g, system:cluster-admins, role:admin
        g, cluster-admins, role:admin
        g, admin, role:admin
        p, role:ai-agent, applications, get, */*, allow
        p, role:ai-agent, applications, sync, */*, allow
        p, role:ai-agent, logs, get, */*, allow
        g, ai-agent, role:ai-agent
      scopes: '[groups,email]'
    env:
      - name: GOMEMLIMIT
        value: "3600MiB"
      - name: GOMAXPROCS
        value: "4"

  namespaces:
    # stackrox: {}  # ACS disabled by default to save resources
    # ACM hub-ca-config-policy (VP acm chart) creates the trusted-hub-bundle
    # ConfigMap here. Without it, the policy is NonCompliant on this spoke.
    imperative: {}
    neuroface: {}
    neuroface-cv: {}
    service-interconnect: {}
    redhat-connectivity-link-operator:
      operatorGroup: true
      targetNamespaces: []
    redhat-ods-operator:
      operatorGroup: true
      targetNamespaces: []
    redhat-ods-applications: {}
    devspaces: {}
    openshift-cluster-observability-operator:
      operatorGroup: true
      targetNamespaces: []
    openshift-opentelemetry: {}
    istio-system: {}
    istio-cni: {}
    ztunnel: {}
    external-secrets-operator:
      operatorGroup: true
      targetNamespaces: []
    external-secrets: {}

  subscriptions:
    amq-streams:
      name: amq-streams
      namespace: openshift-operators
      channel: stable
      source: redhat-operators
    amq-streams-console:
      name: amq-streams-console
      namespace: openshift-operators
      channel: stable
      source: redhat-operators
    skupper:
      name: skupper-operator
      namespace: openshift-operators
      channel: stable-2
      source: redhat-operators
    # rhacs:  # ACS disabled by default to save resources
    #   name: rhacs-operator
    #   namespace: openshift-operators
    #   channel: stable
    #   source: redhat-operators
    servicemesh:
      name: servicemeshoperator3
      namespace: openshift-operators
      channel: stable-3.2
      source: redhat-operators
    rhods:
      name: rhods-operator
      namespace: redhat-ods-operator
      channel: stable-3.4
      source: redhat-operators
    opentelemetry:
      name: opentelemetry-product
      namespace: openshift-operators
      channel: stable
      source: redhat-operators
    cluster-observability-operator:
      name: cluster-observability-operator
      namespace: openshift-cluster-observability-operator
      channel: stable
      source: redhat-operators
    devspaces:
      name: devspaces
      namespace: openshift-operators
      channel: stable
      source: redhat-operators
    eso:
      name: openshift-external-secrets-operator
      namespace: external-secrets-operator
      channel: stable-v1
    rhcl:
      name: rhcl-operator
      namespace: redhat-connectivity-link-operator
      channel: stable
      source: redhat-operators
    kiali:
      name: kiali-ossm
      namespace: openshift-operators
      channel: stable
      source: redhat-operators
    pipelines:
      name: openshift-pipelines-operator-rh
      namespace: openshift-operators
      channel: latest
      source: redhat-operators

  argoProjects:
    - platform
    - security
    - mesh
    - observability
    - ai
    - workshop
    - external-secrets

  sharedValueFiles:
    - '/overrides/values-{{ $.Values.global.clusterPlatform }}.yaml'
    - '/overrides/values-{{ $.Values.global.clusterVersion }}-{{ $.Values.clusterGroup.name }}.yaml'

  applications:
    argocd-local-users:
      name: argocd-local-users
      namespace: vp-gitops
      argoProject: platform
      path: charts/all/argocd-local-users
      syncWave: "0"

    argocd-mcp-spoke-export:
      name: argocd-mcp-spoke-export
      namespace: vp-gitops
      argoProject: platform
      path: charts/all/argocd-mcp-spoke-export
      syncWave: "1"
      overrides:
        - name: clusterRole
          value: spoke

    platform-users:
      name: platform-users
      namespace: openshift-gitops
      argoProject: platform
      path: charts/all/platform-users
      syncWave: "0"
      overrides:
        - name: userCount
          value: "30"
        - name: clusterRole
          value: spoke

    servicemesh-config:
      name: servicemesh-config
      namespace: istio-system
      argoProject: mesh
      chart: servicemesh
      chartVersion: 0.1.*
      syncWave: "1"
      overrides:
        - name: servicemesh.profile
          value: ambient
        - name: servicemesh.istio.name
          value: default

    istio-ztunnel:
      name: istio-ztunnel
      namespace: istio-system
      argoProject: mesh
      path: charts/all/istio-ztunnel
      syncWave: "2"
      overrides:
        - name: syncWave
          value: "2"

    observability:
      name: observability
      namespace: openshift-cluster-observability-operator
      argoProject: observability
      path: charts/all/observability
      syncWave: "2"
      overrides:
        - name: clusterRole
          value: spoke
        - name: clusterName
          value: west
        - name: clusterSuffix
          value: "-west"

    # acs-secured-cluster:  # ACS disabled by default to save resources
    #   name: acs-secured-cluster
    #   namespace: stackrox
    #   argoProject: security
    #   path: charts/all/acs-secured-cluster
    #   syncWave: "3"
    #   overrides:
    #     - name: clusterName
    #       value: west
    #     - name: clusterRole
    #       value: spoke

    openshift-external-secrets:
      name: openshift-external-secrets
      namespace: external-secrets
      argoProject: external-secrets
      chart: openshift-external-secrets
      chartVersion: 0.0.*
      syncWave: "2"

    spoke-interconnect:
      name: spoke-interconnect
      namespace: service-interconnect
      argoProject: mesh
      path: charts/all/spoke-interconnect
      syncWave: "4"
      overrides:
        - name: clusterName
          value: west

    skupper-network-observer:
      name: skupper-network-observer
      namespace: service-interconnect
      argoProject: mesh
      path: charts/all/skupper-network-observer
      syncWave: "5"

    # Upstream NeuroFace app (external Helm repo — VP multiSource, not vendored in Git).
    neuroface:
      name: neuroface
      namespace: neuroface
      argoProject: ai
      repoURL: https://maximilianopizarro.github.io/neuroface/
      chart: neuroface
      chartVersion: 1.4.*
      syncWave: "4"
      overrides:
        - name: fullnameOverride
          value: neuroface
        - name: clusterName
          value: west
        - name: backend.image.tag
          value: v1.5.1
        - name: frontend.image.tag
          value: v1.5.1
        - name: chat.enabled
          value: "true"
        - name: chat.autoServiceAccount
          value: "false"
        - name: chat.modelEndpoint
          value: "https://maas-rhdp.apps.maas.redhatworkshops.io/v1"
        - name: chat.modelName
          value: llama-scout-17b
        - name: chat.apiKey
          value: ""
        - name: ovms.enabled
          value: "true"
        - name: ovms.externalUrl
          value: "http://modelmesh-serving.redhat-ods-applications.svc.cluster.local:8008"
        - name: ovms.modelName
          value: face-detection-retail-0005
        - name: litellm.enabled
          value: "false"
        - name: ppe.enabled
          value: "true"
        - name: ppe.useFederatedGateway
          value: "false"
        - name: ppe.endpoint
          value: "http://yolo-ppe-serving.neuroface-cv.svc:8080"
        - name: ppe.classes
          value: "hardhat,safety-vest,goggles"
        - name: ppe.confidence
          value: "0.15"
        - name: ppe.kafka.enabled
          value: "false"
        - name: ppe.kafka.bootstrap
          value: "kafka-west-tst.service-interconnect.svc:9092"
        - name: ppe.kafka.topic
          value: "cv.ppe.detections"
        - name: ppe.dataPersistence.enabled
          value: "true"
        - name: ppe.dataPersistence.s3Endpoint
          value: "http://minio-hub.service-interconnect.svc:9000"
        - name: ppe.dataPersistence.s3Bucket
          value: "models"
        - name: ppe.dataPersistence.s3Prefix
          value: "ppe-detection/training-data"
        - name: ppe.dataPersistence.s3AccessKey
          value: "minio"
        - name: ppe.dataPersistence.s3SecretKey
          value: "minio123"
        - name: ppe.dataPersistence.s3Secure
          value: "false"
        - name: ppe.dataPersistence.samplingRate
          value: "1.0"
        - name: route.enabled
          value: "false"

    # Spoke platform wrappers only (Gateway API, Skupper, ModelMesh helpers).
    spoke-neuroface:
      name: spoke-neuroface
      namespace: neuroface
      argoProject: ai
      path: charts/all/spoke-neuroface
      syncWave: "5"
      overrides:
        - name: clusterName
          value: west
        - name: spokeGateway.replicas
          value: "2"

    spoke-neuroface-cv:
      name: spoke-neuroface-cv
      namespace: neuroface-cv
      argoProject: ai
      path: charts/all/spoke-neuroface-cv
      syncWave: "6"
      overrides:
        - name: clusterName
          value: west

    kafka-console:
      name: kafka-console
      namespace: neuroface-cv
      argoProject: ai
      path: charts/all/kafka-console
      syncWave: "7"

    console-links:
      name: console-links
      namespace: openshift-gitops
      argoProject: workshop
      path: charts/all/console-links
      syncWave: "10"
      overrides:
        - name: clusterRole
          value: spoke

    devspaces:
      name: devspaces
      namespace: devspaces
      argoProject: workshop
      path: charts/all/devspaces
      syncWave: "7"
      overrides:
        - name: userCount
          value: "30"
        - name: clusterName
          value: west