Initial chart import from local infrastructure/

values.yaml

@@ -0,0 +1,59 @@
+# OdooSky v3 instance-template-v3 — default values.
+#
+# Per-tenant overlay repos override only the keys that differ from these
+# defaults. Keep this file as the single source of truth for what an
+# Odoo instance looks like by default; do not duplicate defaults in the
+# overlay schema or in Tower-Go.
+
+instance:
+  # Short slug used in K8s object names + as the Helm release name.
+  # Must be DNS-safe (lowercase, no underscores, <= 40 chars).
+  code: demo
+  # The full HTTPS hostname this instance answers on.
+  # Tenants live under *.tenants.odoosky.org (covered by wildcard DNS A).
+  domain: demo.tenants.odoosky.org
+
+odoo:
+  image: odoo
+  tag: "18.0"
+  # Filestore PVC size (Odoo's /var/lib/odoo).
+  filestoreSize: 10Gi
+  resources:
+    requests:
+      memory: 512Mi
+      cpu: 250m
+    limits:
+      memory: 2Gi
+      cpu: "2"
+
+postgres:
+  image: postgres
+  tag: "16-alpine"
+  user: odoo
+  database: postgres
+  # If empty, the chart auto-generates on first install and re-reads
+  # the existing Secret on subsequent upgrades (lookup pattern).
+  password: ""
+  storage: 10Gi
+  resources:
+    requests:
+      memory: 256Mi
+      cpu: 100m
+    limits:
+      memory: 1Gi
+      cpu: "1"
+
+ingress:
+  # Traefik entrypoint name (set on the Traefik install in the
+  # `traefik` namespace).
+  entryPoint: websecure
+  # The pre-provisioned wildcard cert for *.tenants.odoosky.org —
+  # one Certificate resource issued ONCE in the chart's release
+  # namespace, then every instance's IngressRoute references the
+  # resulting Secret. Avoids Let's Encrypt's per-week certificate
+  # issuance ceiling (50/week/registered-domain) as we scale to
+  # many tenants.
+  #
+  # See infrastructure/cluster/wildcard-cert.yaml for the
+  # provisioning manifest.
+  tlsSecret: tenants-wildcard-tls