# Keep resource names stable so a restricted CI identity can update only these
# known objects. Change this before the first installation if desired.
fullnameOverride: traefik-error-pages

replicaCount: 1

image:
  repository: nginxinc/nginx-unprivileged
  tag: 1.29.4-alpine
  pullPolicy: IfNotPresent

branding:
  reverseProxyName: Kubernetes Reverse Proxy
  authenticationName: Cluster Authentication
  clusterReachedText: The request reached the Kubernetes cluster

service:
  port: 80

middleware:
  name: upstream-errors
  status:
    - 500-599

# Optional ForwardAuth chain. When enabled, routes use this generated chain
# instead of their original ForwardAuth middleware. The markers allow the page
# to distinguish an authentication outage from an upstream outage.
auth:
  enabled: false
  marker: forward-auth
  contextMiddlewareName: error-auth-context
  forwardMiddlewareName: error-auth-forward
  checkedMiddlewareName: error-auth-checked
  chainMiddlewareName: error-auth
  forwardAddress: ""
  trustForwardHeader: true
  responseHeaders: []

resources:
  requests:
    cpu: 5m
    memory: 16Mi
  limits:
    cpu: 100m
    memory: 64Mi