{
  "title": "Chart Values",
  "type": "object",
  "properties": {
    "replicas": {
      "description": "Number of Postgres replicas.",
      "type": "integer",
      "default": 2
    },
    "resources": {
      "description": "Explicit CPU and memory configuration for each PostgreSQL replica. When omitted, the preset defined in `resourcesPreset` is applied.",
      "type": "object",
      "default": {},
      "properties": {
        "cpu": {
          "description": "CPU available to each replica.",
          "pattern": "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$",
          "anyOf": [
            {
              "type": "integer"
            },
            {
              "type": "string"
            }
          ],
          "x-kubernetes-int-or-string": true
        },
        "memory": {
          "description": "Memory (RAM) available to each replica.",
          "pattern": "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$",
          "anyOf": [
            {
              "type": "integer"
            },
            {
              "type": "string"
            }
          ],
          "x-kubernetes-int-or-string": true
        }
      }
    },
    "resourcesPreset": {
      "description": "Default sizing preset used when `resources` is omitted.",
      "type": "string",
      "default": "t1.micro",
      "enum": [
        "t1.nano",
        "t1.micro",
        "t1.small",
        "t1.medium",
        "t1.large",
        "t1.xlarge",
        "t1.2xlarge",
        "t1.4xlarge",
        "c1.nano",
        "c1.micro",
        "c1.small",
        "c1.medium",
        "c1.large",
        "c1.xlarge",
        "c1.2xlarge",
        "c1.4xlarge",
        "s1.nano",
        "s1.micro",
        "s1.small",
        "s1.medium",
        "s1.large",
        "s1.xlarge",
        "s1.2xlarge",
        "s1.4xlarge",
        "u1.nano",
        "u1.micro",
        "u1.small",
        "u1.medium",
        "u1.large",
        "u1.xlarge",
        "u1.2xlarge",
        "u1.4xlarge",
        "m1.nano",
        "m1.micro",
        "m1.small",
        "m1.medium",
        "m1.large",
        "m1.xlarge",
        "m1.2xlarge",
        "m1.4xlarge",
        "nano",
        "micro",
        "small",
        "medium",
        "large",
        "xlarge",
        "2xlarge"
      ]
    },
    "size": {
      "description": "Persistent Volume Claim size available for application data.",
      "default": "10Gi",
      "pattern": "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$",
      "anyOf": [
        {
          "type": "integer"
        },
        {
          "type": "string"
        }
      ],
      "x-kubernetes-int-or-string": true
    },
    "storageClass": {
      "description": "StorageClass used to store the data.",
      "type": "string",
      "default": ""
    },
    "external": {
      "description": "Enable external access from outside the cluster.",
      "type": "boolean",
      "default": false
    },
    "version": {
      "description": "PostgreSQL major version to deploy",
      "type": "string",
      "default": "v18",
      "enum": [
        "v18",
        "v17",
        "v16",
        "v15",
        "v14",
        "v13"
      ]
    },
    "postgresql": {
      "description": "PostgreSQL server configuration.",
      "type": "object",
      "default": {},
      "properties": {
        "parameters": {
          "description": "PostgreSQL server parameters. Values may be strings or integers; integers are coerced to strings by the template (e.g. both `max_connections: 100` and `max_connections: \"100\"` are accepted). BLOCKED (enable arbitrary code execution): archive_command, restore_command, ssl_passphrase_command, archive_cleanup_command, recovery_end_command, dynamic_library_path, local_preload_libraries, session_preload_libraries, shared_preload_libraries. Do NOT override CloudNativePG-managed parameters: archive_mode, primary_conninfo, wal_level, max_replication_slots.",
          "type": "object",
          "default": {
            "max_connections": "100"
          },
          "additionalProperties": {
            "anyOf": [
              {
                "type": "integer"
              },
              {
                "type": "string"
              }
            ],
            "x-kubernetes-int-or-string": true
          }
        }
      }
    },
    "quorum": {
      "description": "Quorum configuration for synchronous replication.",
      "type": "object",
      "default": {},
      "required": [
        "maxSyncReplicas",
        "minSyncReplicas"
      ],
      "properties": {
        "maxSyncReplicas": {
          "description": "Maximum number of synchronous replicas allowed (must be less than total replicas).",
          "type": "integer",
          "default": 0
        },
        "minSyncReplicas": {
          "description": "Minimum number of synchronous replicas required for commit.",
          "type": "integer",
          "default": 0
        }
      }
    },
    "users": {
      "description": "Users configuration map.",
      "type": "object",
      "default": {},
      "additionalProperties": {
        "type": "object",
        "properties": {
          "password": {
            "description": "Password for the user.",
            "type": "string"
          },
          "replication": {
            "description": "Whether the user has replication privileges.",
            "type": "boolean"
          }
        }
      }
    },
    "databases": {
      "description": "Databases configuration map.",
      "type": "object",
      "default": {},
      "additionalProperties": {
        "type": "object",
        "properties": {
          "extensions": {
            "description": "List of enabled PostgreSQL extensions.",
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "roles": {
            "description": "Roles assigned to users.",
            "type": "object",
            "properties": {
              "admin": {
                "description": "List of users with admin privileges.",
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "readonly": {
                "description": "List of users with read-only privileges.",
                "type": "array",
                "items": {
                  "type": "string"
                }
              }
            }
          }
        }
      }
    },
    "backup": {
      "description": "Backup configuration.",
      "type": "object",
      "default": {},
      "required": [
        "enabled"
      ],
      "properties": {
        "destinationPath": {
          "description": "Destination path for backups (e.g. s3://bucket/path/).",
          "type": "string",
          "default": "s3://bucket/path/to/folder/"
        },
        "enabled": {
          "description": "Enable regular backups.",
          "type": "boolean",
          "default": false
        },
        "endpointCA": {
          "description": "Pre-existing Secret with the CA bundle Barman should trust when reaching a self-signed S3 endpoint. Used for both backup and bootstrap recovery. The CNPG backup driver writes this field on restore.",
          "type": "object",
          "default": {},
          "properties": {
            "key": {
              "description": "Key within the Secret containing the CA bundle. Defaults to `ca.crt`.",
              "type": "string",
              "default": ""
            },
            "name": {
              "description": "Name of the Secret in the application namespace. Empty means no endpointCA is emitted (Barman uses the system trust store).",
              "type": "string",
              "default": ""
            }
          }
        },
        "endpointURL": {
          "description": "S3 endpoint URL for uploads.",
          "type": "string",
          "default": "http://minio-gateway-service:9000"
        },
        "retentionPolicy": {
          "description": "Retention policy (e.g. \"30d\").",
          "type": "string",
          "default": "30d"
        },
        "s3AccessKey": {
          "description": "Access key for S3 authentication. Ignored when `s3CredentialsSecret.name` is set.",
          "type": "string",
          "default": "\u003cyour-access-key\u003e"
        },
        "s3CredentialsSecret": {
          "description": "Pre-existing Secret with S3 credentials. When set, the chart references this Secret directly instead of materialising one from `s3AccessKey`/`s3SecretKey`. The CNPG backup driver writes this field on restore so credentials never land in the CR `.spec`.",
          "type": "object",
          "default": {},
          "properties": {
            "accessKeyIDKey": {
              "description": "Key in the Secret holding the access key ID. Defaults to `AWS_ACCESS_KEY_ID`.",
              "type": "string",
              "default": ""
            },
            "name": {
              "description": "Name of the Secret in the application namespace. Empty means the chart materialises `\u003crelease\u003e-s3-creds` from `s3AccessKey`/`s3SecretKey`.",
              "type": "string",
              "default": ""
            },
            "secretAccessKeyKey": {
              "description": "Key in the Secret holding the secret access key. Defaults to `AWS_SECRET_ACCESS_KEY`.",
              "type": "string",
              "default": ""
            }
          }
        },
        "s3SecretKey": {
          "description": "Secret key for S3 authentication. Ignored when `s3CredentialsSecret.name` is set.",
          "type": "string",
          "default": "\u003cyour-secret-key\u003e"
        },
        "schedule": {
          "description": "Legacy. Cron schedule (CNPG 6-field format) for the chart-emitted ScheduledBackup. Empty means no chart-managed schedule, which is the recommended setup when a `BackupClass` from `backups.cozystack.io` already drives backup orchestration. The chart still emits `spec.backup.barmanObjectStore` whenever `backup.enabled=true`, so `archive_command` runs and the BackupClass driver can take ad-hoc / Plan-driven backups against a live WAL archive.",
          "type": "string",
          "default": ""
        }
      }
    },
    "bootstrap": {
      "description": "Bootstrap configuration.",
      "type": "object",
      "default": {},
      "required": [
        "enabled",
        "oldName"
      ],
      "properties": {
        "enabled": {
          "description": "Whether to restore from a backup.",
          "type": "boolean",
          "default": false
        },
        "oldName": {
          "description": "Previous cluster name before deletion.",
          "type": "string",
          "default": ""
        },
        "recoveryTime": {
          "description": "Timestamp (RFC3339) for point-in-time recovery; empty means latest.",
          "type": "string",
          "default": ""
        },
        "serverName": {
          "description": "Barman server name (S3 path prefix) used by the original cluster when writing backups. Set this only when the original cluster had an explicit barmanObjectStore.serverName that differed from its Kubernetes resource name.",
          "type": "string",
          "default": ""
        }
      }
    }
  }
}