---
apiVersion: codemowers.cloud/v1beta1
kind: OIDCClient
metadata:
  name: harbor
  namespace: harbor-operator
spec:
  displayName: Harbor
  uri: https://harbor.k-space.ee
  redirectUris:
    - https://harbor.k-space.ee/c/oidc/callback
  allowedGroups:
    - k-space:floor
  grantTypes:
    - authorization_code
    - refresh_token
  responseTypes:
    - code
  availableScopes:
    - openid
    - profile
  pkce: false
---
apiVersion: codemowers.cloud/v1beta1
kind: MinioBucketClaim
metadata:
  name: harbor
  namespace: harbor-operator
spec:
  capacity: 1Ti
  class: external
---
apiVersion: codemowers.cloud/v1beta1
kind: SecretClaim
metadata:
  name: dragonfly-auth
spec:
  size: 32
  mapping:
    - key: REDIS_PASSWORD
      value: "%(plaintext)s"
    - key: REDIS_URI
      value: "redis://:%(plaintext)s@dragonfly"
---
apiVersion: dragonflydb.io/v1alpha1
kind: Dragonfly
metadata:
  name: dragonfly
spec:
  authentication:
    passwordFromSecret:
      key: REDIS_PASSWORD
      name: dragonfly-auth
  replicas: 3
  resources:
    limits:
      memory: 5Gi