# <your>.values.yaml
agent:
  # ---------- AUTH  ----------
  # !!! This helm chart provides two way for passing the personal access token. PLEASE fill only 'pat' or 'patSecret'.
  # 1st way: Personal access token could be passed with 'pat' field.
  pat: ""

  # 2nd way: If a secret that contains personal access token exists in kubernetes, its name and key could be passed with following fields.
  patSecret: "azp-pat"
  patSecretKey: "AZP_TOKEN"
  # ---------- AUTH  ----------


  # Server / organization url, e.g.: https://dev.azure.com/your-organization-name
  organizationUrl: "https://dev.azure.com/{YOUR-ORG}"

  # Agent pool name which the build agent is placed into
  pool: "Default"

  # Working directory of agent
  workingDirectory: "/azp/_work"

  # Additional environment variables, if you need
  extraEnv:
    DOCKER_HOST: tcp://localhost:2375

nameOverride: ""
fullnameOverride: ""
replicaCount: 1

image:
  registry: docker.io
  repository: hakob/azp-k8s-agent
  pullPolicy: IfNotPresent
  tag: "20240403.1"
  pullSecrets: []

resources:
  limits:
    cpu: 500m
    memory: 512Mi
  requests:
    cpu: 100m
    memory: 128Mi

volumes:
  - name: storage
    emptyDir: {}
  - name: azp-workdir
    emptyDir: {}

volumeMounts:
  - name: azp-workdir
    mountPath: /azp/_work
    subPath: _work

# Additional init containers, e. g. for providing custom themes
extraContainers:
    |
    - name: dind
      image: "docker:dind"
      imagePullPolicy: Always
      command: ["dockerd", "--host", "tcp://localhost:2375"]
      env:
        - name: DOCKER_TLS_CERTDIR
          value: ""
        - name: DOCKER_TLS_VERIFY
          value: "0"
        - name: DOCKER_HOST
          value: "tcp://localhost:2375"
      securityContext:
        privileged: true
      resources:
        limits:
          cpu: 200m
          memory: 256Mi
        requests:
          cpu: 100m
          memory: 128Mi
      volumeMounts:
        - name: storage
          mountPath: /var/lib/docker
          subPath: docker
        - name: azp-workdir
          mountPath: /azp/_work
          subPath: _work

serviceAccount:
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""
  # Specifies whether a service account should be created
  create: true
  # Automatically mount a ServiceAccount's API credentials?
  automount: true
  # Annotations to add to the service account
  annotations: {}

nodeSelector: {}
tolerations: []
affinity: {}
podLabels: {}
podAnnotations: {}
podSecurityContext: {}
securityContext: {}