# Always pull the images here so we can be sure this works.
# Otherwise we might not notice it broke if the image is already present on the worker node.
image:
  pullPolicy: Always

imagePullSecrets:
  # personal(!) access token with read AND write privileges to the registry in order to use the dependency proxy
  - name: shibboleth-sp-dependency-proxy

route:
  enabled: true

deployment:
  automaticPodRollout:
    always: true

global:
  domainName: "shibboleth-sp-helm-chart.zh.shift.switchengines.ch"

backend:
  shibboleth:
    applicationDefaults:
      entityID: "https://shibboleth-sp-helm-chart.zh.shift.switchengines.ch/shibboleth"
      homeURL: "/Shibboleth.sso/Session"
      
      sessions:
        handlerSSL: "false"

      errors:
        supportContact: "services-support@switch.ch"

      credentialResolver:
        activeSecretName: "shibboleth-sp-helm-chart-certs"

frontend:
  apache:
    enableSSL: true

    # example SWITCHengines S3 bucket hosting a static website:
    # remoteURL: "https://os.zhdk.cloud.switch.ch/swift/v1/shibboleth-sp-helm-chart-demo-page/"
    # example apache deployment in the same namespace:
    remoteURL: "http://shibboleth-sp-helm-chart-example-webserver"

    accessRules: |
      Require shib-attr homeOrganization switch.ch

tests:
  enabled: true

  image:
    repository: "gitlab.switch.ch/helm-charts/shibboleth-sp/dependency_proxy/containers/curlimages/curl"
    tag: "latest"