# core-edu 服务默认值（教学核心 - 业务领域 D2+D3）

# 副本数（生产建议 ≥ 2）
replicaCount: 2

image:
  repository: edu/core-edu
  tag: latest  # 生产请固定 tag，避免 latest
  pullPolicy: IfNotPresent

# 服务端口
service:
  type: ClusterIP
  port: 3002
  targetPort: 3002

# 命名空间（默认 edu-services，由 edu-platform chart 创建）
namespace: edu-services

# 探针配置
probes:
  liveness:
    path: /healthz
    initialDelaySeconds: 15
    periodSeconds: 20
    timeoutSeconds: 3
    failureThreshold: 3
  readiness:
    path: /readyz
    initialDelaySeconds: 5
    periodSeconds: 10
    timeoutSeconds: 3
    failureThreshold: 2

# 资源配额
resources:
  requests:
    cpu: 250m
    memory: 256Mi
  limits:
    cpu: 1000m
    memory: 1Gi

# 滚动更新策略
strategy:
  type: RollingUpdate
  maxSurge: 1
  maxUnavailable: 0

# Prometheus 指标采集
metrics:
  enabled: true
  port: 3002
  path: /metrics

# 安全上下文
securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  allowPrivilegeEscalation: false
  capabilities:
    drop: ["ALL"]

# 服务级 ConfigMap（非敏感配置）
configMap:
  enabled: true
  data:
    NODE_ENV: production
    LOG_LEVEL: info

# HPA
hpa:
  enabled: true
  minReplicas: 2
  maxReplicas: 10
  targetCPUUtilizationPercentage: 70
  targetMemoryUtilizationPercentage: 80

# 敏感配置（从 Secret 引用，Secret 由 edu-platform chart 或 ExternalSecrets 管理）
secretRefs:
  - name: edu-platform-secret
    keys:
      - MYSQL_PASSWORD
      - JWT_SECRET
      - REDIS_PASSWORD
