# Copyright 2020 NVIDIA
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# Default values for network-operator.
# This is a YAML-formatted file.

nfd:
  # -- Deploy Node Feature Discovery operator.
  enabled: true
  # -- Deploy Node Feature Rules to label the nodes with the discovered features.
  deployNodeFeatureRules: true

# -- Enable CRDs upgrade with helm pre-install and pre-upgrade hooks.
upgradeCRDs: true

sriovNetworkOperator:
  # -- Deploy SR-IOV Network Operator.
  enabled: false

nicConfigurationOperator:
  # -- Deploy NIC Configuration Operator.
  enabled: false

maintenanceOperator:
  # -- Deploy Maintenance Operator.
  enabled: false  

# Set both enableNodeFeatureApi and NodeFeatureAPI feature gate to false to disable.
node-feature-discovery:
  # -- The Node Feature API enable communication between nfd master and worker
  # through NodeFeature CRs. Otherwise communication is through gRPC.
  enableNodeFeatureApi: true
  featureGates:
    NodeFeatureAPI: true

  # -- NFD master deployment configuration.
  # @notationType -- yaml
  master:
    serviceAccount:
      name: node-feature-discovery
      create: true
    config:
      extraLabelNs: ["nvidia.com"]
  gc:
    # -- Specifies whether the NFD Garbage Collector should be created
    enable: true
    # -- Specifies the number of replicas for the NFD Garbage Collector
    replicaCount: 1
    serviceAccount:
      # -- The name of the service account for garbage collector to use.
      # If not set and create is true, a name is generated using the fullname
      # template and -gc suffix.
      name: node-feature-discovery
      # -- disable creation to avoid duplicate serviceaccount creation by master
      # spec above.
      create: false
  # -- NFD worker daemonset configuration.
  # @notationType -- yaml
  worker:
    serviceAccount:
      # disable creation to avoid duplicate serviceaccount creation by master spec
      # above
      name: node-feature-discovery
      create: false
    tolerations:
    - key: "node-role.kubernetes.io/master"
      operator: "Exists"
      effect: "NoSchedule"
    - key: "node-role.kubernetes.io/control-plane"
      operator: "Exists"
      effect: "NoSchedule"
    - key: nvidia.com/gpu
      operator: Exists
      effect: NoSchedule
    config:
      sources:
        pci:
          deviceClassWhitelist:
          - "0300"
          - "0302"
          deviceLabelFields:
          - vendor

# SR-IOV Network Operator chart related values.
sriov-network-operator:
  operator:
    # -- Prefix to be used for resources names.
    resourcePrefix: "nvidia.com"
    # -- Enable admission controller.
    # @notationType -- yaml
    admissionControllers:
      enabled: false
      certificates:
        secretNames:
          operator: "operator-webhook-cert"
          injector: "network-resources-injector-cert"
        certManager:
          # -- When enabled, makes use of certificates managed by cert-manager.
          enabled: true
          # -- When enabled, certificates are generated via cert-manager and then
          # name will match the name of the secrets defined above.
          generateSelfSigned: true
        # -- If not specified, no secret is created and secrets with the names
        # defined above are expected to exist in the cluster. In that case,
        # the ca.crt must be base64 encoded twice since it ends up being an env variable.
        custom:
          enabled: false
      #   operator:
      #     caCrt: |
      #       -----BEGIN CERTIFICATE-----
      #       MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
      #       ...
      #       -----END CERTIFICATE-----
      #     tlsCrt: |
      #       -----BEGIN CERTIFICATE-----
      #       MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
      #       ...
      #       -----END CERTIFICATE-----
      #     tlsKey: |
      #       -----BEGIN EC PRIVATE KEY-----
      #       MHcl4wOuDwKQa+upc8GftXE2C//4mKANBC6It01gUaTIpo=
      #       ...
      #      -----END EC PRIVATE KEY-----
      #   injector:
      #     caCrt: |
      #       -----BEGIN CERTIFICATE-----
      #       MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
      #       ...
      #       -----END CERTIFICATE-----
      #     tlsCrt: |
      #       -----BEGIN CERTIFICATE-----
      #       MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
      #       ...
      #       -----END CERTIFICATE-----
      #     tlsKey: |
      #       -----BEGIN EC PRIVATE KEY-----
      #       MHcl4wOuDwKQa+upc8GftXE2C//4mKANBC6It01gUaTIpo=
      #       ...
      #      -----END EC PRIVATE KEY-----

  # Image URIs for sriov-network-operator components.
  images:
    operator: nvcr.io/nvidia/mellanox/sriov-network-operator:network-operator-25.1.0
    sriovConfigDaemon: nvcr.io/nvidia/mellanox/sriov-network-operator-config-daemon:network-operator-25.1.0
    sriovCni: ghcr.io/k8snetworkplumbingwg/sriov-cni:v2.8.1
    ibSriovCni: ghcr.io/k8snetworkplumbingwg/ib-sriov-cni:v1.1.1
    ovsCni: ghcr.io/k8snetworkplumbingwg/ovs-cni-plugin:v0.37.0
    # rdmaCni: ghcr.io/k8snetworkplumbingwg/rdma-cni:v1.2.0
    sriovDevicePlugin: ghcr.io/k8snetworkplumbingwg/sriov-network-device-plugin:v3.9.0
    resourcesInjector: ghcr.io/k8snetworkplumbingwg/network-resources-injector:v1.7.0
    webhook: nvcr.io/nvidia/mellanox/sriov-network-operator-webhook:network-operator-25.1.0
  # imagePullSecrest for SR-IOV Network Operator related images
  # imagePullSecrets: []
  sriovOperatorConfig:
    # -- Deploy ``SriovOperatorConfig`` custom resource
    deploy: true
    # -- Selects the nodes to be configured
    # @notationType -- yaml
    configDaemonNodeSelector:
      beta.kubernetes.io/os: "linux"
      network.nvidia.com/operator.mofed.wait: "false"

# Nic Configuration Operator chart related values.
nic-configuration-operator-chart:
  operator:
    image:
      repository: ghcr.io/mellanox
      name: nic-configuration-operator
      tag: v0.1.17
  configDaemon:
    image:
      repository: ghcr.io/mellanox
      name: nic-configuration-operator-daemon
      tag: v0.1.17

# Maintenance Operator chart related values.
maintenance-operator-chart:
  operator:
    image:
      repository: ghcr.io/mellanox
      name: maintenance-operator
      tag: v0.2.0
    admissionController:
      # -- enable admission controller of the operator
      enable: false
      certificates:
        secretNames:
          # -- secret name containing certificates for the operator admission controller
          operator: "maintenance-webhook-cert"
        certManager:
          # -- use cert-manager for certificates
          enable: false
          # -- generate self-signed certificates with cert-manager
          generateSelfSigned: false
        custom:
          # -- enable custom certificates using secrets
          enable: false         

# General Operator related values
# The operator element allows to deploy network operator from an alternate location
operator:
  # -- Optional `resource requests and limits <https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/>`_
  # for the operator.
  # @notationType -- yaml
  resources:
    limits:
      cpu: 500m
      memory: 128Mi
    requests:
      cpu: 5m
      memory: 64Mi
  # -- Set additional tolerations for various Daemonsets deployed by the operator.
  # @notationType -- yaml
  tolerations:
    - key: "node-role.kubernetes.io/master"
      operator: "Equal"
      value: ""
      effect: "NoSchedule"
    - key: "node-role.kubernetes.io/control-plane"
      operator: "Equal"
      value: ""
      effect: "NoSchedule"
  # -- Configure node selector settings for the operator.
  nodeSelector: {}
  affinity:
    # -- Configure node affinity settings for the operator.
    # @notationType -- yaml
    nodeAffinity:
      preferredDuringSchedulingIgnoredDuringExecution:
        - weight: 1
          preference:
            matchExpressions:
              - key: "node-role.kubernetes.io/master"
                operator: In
                values: [""]
        - weight: 1
          preference:
            matchExpressions:
              - key: "node-role.kubernetes.io/control-plane"
                operator: In
                values: [ "" ]
  # -- Network Operator image repository.
  repository: nvcr.io/nvidia/cloud-native
  # -- Network Operator image name
  image: network-operator
  # imagePullSecrets: []
  # -- Name to be used as part of objects name generation.
  nameOverride: ""
  # -- Name to be used to replace generated names.
  fullnameOverride: ""
  # tag, if defined will use the given image tag, else Chart. AppVersion will be used.
  # tag
  # -- Directory, where CNI binaries will be deployed on the nodes. Setting for 
  # the sriov-network-operator is set with ``sriov-network-operator.cniBinPath``
  # parameter. Note that the CNI bin directory should be aligned with the CNI bin
  # directory in the container runtime.
  cniBinDirectory: /opt/cni/bin
  # -- Enable the use of Driver ToolKit to compile DOCA Drivers (OpenShift only).
  useDTK: true
  admissionController:
    # -- Deploy with admission controller.
    enabled: false
    # -- Use cert-manager for generating self-signed certificate.
    useCertManager: true
    # certificate:
      # caCrt: |
      #   -----BEGIN CERTIFICATE-----
      #   MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
      #   ...
      #   -----END CERTIFICATE-----    
      # tlsCrt: |
      #   -----BEGIN CERTIFICATE-----
      #   MIIMIICLDCCAdKgAwIBAgIBADAKBggqhkjOPQQDAjB9MQswCQYDVQQGEwJCRTEPMA0G
      #   ...
      #   -----END CERTIFICATE-----
      # tlsKey: |
      #   -----BEGIN EC PRIVATE KEY-----
      #   MHcl4wOuDwKQa+upc8GftXE2C//4mKANBC6It01gUaTIpo=
      #   ...
      #  -----END EC PRIVATE KEY-----
  ofedDriver:
    initContainer:
      # -- Deploy init container.
      enable: true
      # -- Init container image repository.
      repository: ghcr.io/mellanox
      # -- Init container image name.
      image: network-operator-init-container
      # -- Init container image version.
      version: v0.0.3

# -- An optional list of references to secrets to use for pulling any of the
# Network Operator images.
imagePullSecrets: []

# @ignore
test:
  pf: ens2f0