helm_values:
  {replicaCount: 1, image: {repository: nginx, tag: "1.27-alpine"}, service: {type: ClusterIP, port: 80}, tls: {enabled: false, secretName: "", servicePort: 443,
      # -- Filesystem path where TLS cert+key are mounted. Defaults to /etc/tls.
      mountPath: "",
      # -- Volume type for the TLS material. Supported: secret (default), persistentVolumeClaim, projected, csi.
      volumeType: "secret",
      # -- PVC claim name (required when volumeType is persistentVolumeClaim).
      pvcClaimName: "",
      # -- SecretProviderClass name (required when volumeType is csi).
      secretProviderClass: "",
      # -- Whether to run the wait-for-tls initContainer that polls for cert files. Disable for CSI volumes that are populated asynchronously.
      waitForCerts: true},
    # -- Scope component (API server). Creates a separate Deployment + Service on port 8080.
    scope: {enabled: false, replicaCount: 1, image: {repository: nginx, tag: "1.27-alpine"}, service: {port: 8080}},
    # -- Darkroom component (async processor). Creates a separate Deployment with optional PVC mount.
    darkroom: {enabled: false, replicaCount: 1, image: {repository: nginx, tag: "1.27-alpine"}, pvc: {enabled: false, claimName: "", mountPath: /data}},
    # -- Ingress resource for skywatcher Service.
    ingress: {enabled: false, className: "nginx", host: "", path: /, pathType: Prefix},
    # -- HTTPRoute resource for Gateway API integration.
    gatewayRoute: {enabled: false, parentRef: {name: envoy, namespace: "", sectionName: ""}, hostname: ""},
    # -- Service mesh integration.
    mesh: {inject: false},
    # -- Policy compliance labels applied to pod templates.
    policy: {complianceLabels: {}}, rbac.create: false}
raw_manifest_refs:
  []