kind: Bundle
metadata:
  name: openwebui

helm:
  releaseName: openwebui
  chart: open-webui
  version: 14.2.0
  repo: https://helm.openwebui.com/

  values:
    replicaCount: 1
    service:
      type: LoadBalancer
    
    websocket:
      enabled: true
      manager: redis

    redis:
      enabled: true

    ollama:
      enabled: false
    tika:
      enabled: false
    enableOpenaiApi: false
    ollamaUrls: 
      - "http://ollama.homelab-test.hnrx.net"

    sso:
      enabled: true
      mergeAccountsByEmail: true
      oidc:
        enabled: true
        clientId: "A2Uwc9itTw5Lfrt7s89Y1T0v8xfsOQ5Kf4hhewf2"
        clientSecret: "pCkZipLmaKymVeUzicUDs4NQ44W0kVT3YwRzm30cUUPGvN9YFuqoMJzmivQyQ10PU4JW55ZTaOC2mcz52N2R8azIMfILOtIxzi2oGqU6fLCjVNYuzCuxuouHiYUOphVC"
        providerUrl: "https://auth.hnrx.net/application/o/openwebui/.well-known/openid-configuration"
        providerName: "SSO"
        scopes: "openid email profile"

    route:
      enabled: true
      hostnames:
        - "openwebui.${ get .ClusterLabels \"hnrx.net/cluster-name\" }.hnrx.net"
      parentRefs:
        - name: http
          namespace: kgateway-system
      filters:
          - cors:
              - allowedOrigins: 
                  - "*"

    extraEnvVars:
      - name: WEBUI_URL
        value: "http://openwebui.homelab-test.hnrx.net"
      - name: CORS_ALLOW_ORIGIN
        value: "*"
      - name: WEBUI_SESSION_COOKIE_SECURE
        value: "true"
      - name: WEBUI_AUTH_COOKIE_SECURE
        value: "true"