# Copy to a private file (e.g. gitops/values/overrides.local.yaml, gitignored) or merge into gitops/values/env-example.yaml.
#
# Argo CD: under spec.sources, for the source with path gitops/charts/onelab, add another path to helm.valueFiles
# (paths are relative to that chart directory), e.g.:
#   - ../../values/env-example.yaml
#   - ../../values/secrets.local.yaml
#   - ../../values/overrides.local.yaml

onelab:
  compliance:
    enabled: true
    # Optional tweaks (defaults match chart values.yaml):
    # requireElectronicSignature: true
    # executionOperatorRestrictionPolicy: "reviewed"
    # executionAdminExpertRestrictionPolicy: "reviewed"
    # preventCsvImport: true
    # preventManualMetadataEdit: true
    # deviceRestart: true

  ldap:
    enabled: true
    # timeout: 30
    # encryption: "start_tls"
    # policy: "your-policy"
    # verifyCertificates: true
    # Paths inside the ldap-worker container (mount certs via extraVolumes if needed):
    # tlsCaPath: "/ldap/ca.crt"
    # tlsCertPath: "/ldap/client.crt"
    # tlsKeyPath: "/ldap/client.key"
    # tlsCiphers: ""
    # tlsSslVersion: ""

# Alternative: supply the full YAML yourself (bypasses chart templates in configurations.gotmpl for those keys).
# 1. kubectl create secret generic onelab-configurations-custom -n onelab \
#      --from-file=configurations.yml=./my-configurations.yml
# 2. Set in values:
# configuration:
#   existingSecretName: onelab-configurations-custom