# Reference only. Google Cloud Marketplace normally collects these values in its UI.
# Never commit real passwords, proxy secrets, activation keys, or service-account keys.
gcp:
  project: customer-project-id
  region: us-central1

storage:
  gcs:
    bucket: customer-trinetra-evidence
    prefix: reports
  retentionDays: 400

controller:
  # Kubernetes service-account name. On GKE, annotate it with the dedicated
  # Google service account through Workload Identity Federation.
  serviceAccountName: trinetra-controller
  maxConcurrentRuns: 4

license:
  activationToken: ""
  serverUrl: https://license.trinetraplatform.com

ui:
  serviceAccountName: trinetra-ui
  auth:
    adminEmail: trinetra-admin@example.com
    adminPassword: REPLACE_AT_DEPLOYMENT
    proxySecret: REPLACE_AT_DEPLOYMENT
    allowedDomains: example.com
    cookieSecure: true
  service:
    type: ClusterIP

probe:
  serviceAccountName: trinetra-probe