questions.yml

questions:

- variable: dockerRegistry.enabled
  label: Docker Registry Enabled
  type: boolean
  default: false
  group: "Docker Registry"
  show_subquestion_if: true
  subquestions:
  - variable: dockerRegistry.existingSecret
    label: "Existing Docker Registry Secret"
    type: string
    default: ""
  - variable: dockerRegistry.registry
    label: "Docker Registry Url"
    type: string
    show_if: "dockerRegistry.existingSecret="
  - variable: dockerRegistry.loginid
    label: "Login ID"
    type: string
    show_if: "dockerRegistry.existingSecret="
  - variable: dockerRegistry.password
    label: "Password/Token"
    type: password
    show_if: "dockerRegistry.existingSecret="

- variable: planeVersion
  label: Plane Version (Docker Image Tag)
  type: string
  default: v3.1.4
  required: true
  group: "Docker Registry"
  subquestions:
  - variable: services.web.image
    label: Frontend Docker Image
    type: string
    required: true
    default: "makeplane/web-commercial"
  - variable: services.space.image
    label: Space Docker Image
    type: string
    required: true
    default: "makeplane/space-commercial"
  - variable: services.admin.image
    label: Admin Docker Image
    type: string
    required: true
    default: "makeplane/admin-commercial"
  - variable: services.live.image
    label: Live Docker Image
    type: string
    required: true
    default: "makeplane/live-commercial"
  - variable: services.live.init_image
    label: Live Init Docker Image
    type: string
    default: "busybox"
  - variable: services.monitor.image
    label: Monitor Docker Image
    type: string
    required: true
    default: "makeplane/monitor-commercial"
  - variable: services.silo.image
    label: Silo Docker Image
    type: string
    required: true
    default: "makeplane/silo-commercial"
  - variable: services.silo.init_image
    label: Silo Init Docker Image
    type: string
    default: "busybox"
  - variable: services.api.image
    label: Backend Docker Image
    type: string
    required: true
    default: "makeplane/backend-commercial"
    description: "Used by API, Worker, Beat-Worker"
  - variable: services.email_service.image
    label: Email Service Docker Image
    type: string
    required: true
    default: "makeplane/email-commercial"
  - variable: services.pi.image
    label: Plane AI (PI) Docker Image
    type: string
    required: true
    default: "makeplane/plane-pi-commercial"
  - variable: env.storageClass
    label: "Storage Class for Persistent Volume Claims"
    type: storageclass
  - variable: env.default_cluster_domain
    label: "Default Cluster Domain"
    description: "Kubernetes internal cluster domain used to build in-cluster service URLs"
    type: string
    default: "cluster.local"

- variable: license.licenseServer
  label: "License Server"
  type: string
  required: true
  group: "License Setup"
  subquestions:
  - variable: license.licenseDomain
    label: "License Domain"
    type: string
    required: true

- variable: airgapped.enabled
  label: "Airgapped Enabled"
  type: boolean
  default: false
  group: "License Setup"
  show_subquestion_if: true
  subquestions:
  - variable: airgapped.s3SecretName
    label: "S3 Secret Name"
    type: string
    default: ""
  - variable: airgapped.s3SecretKey
    label: "S3 Secret Key"
    type: string
    default: ""

- variable: services.web.pullPolicy
  label: "Web Pull Policy"
  type: enum
  options:
  - "Always"
  - "IfNotPresent"
  - "Never"
  default: "Always"
  group: "Web Setup"
  subquestions:
  - variable: services.web.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.web.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.web.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.web.memoryRequest
    label: "Memory Request"
    type: string
    default: 128Mi
  - variable: services.web.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.web.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false

- variable: services.space.pullPolicy
  label: "Space Pull Policy"
  type: enum
  options:
  - "Always"
  - "IfNotPresent"
  - "Never"
  default: "Always"
  group: "Spaces Setup"
  subquestions:
  - variable: services.space.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.space.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.space.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.space.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.space.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.space.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false

- variable: services.admin.pullPolicy
  label: "Admin Pull Policy"
  type: enum
  options:
  - "Always"
  - "IfNotPresent"
  - "Never"
  default: "Always"
  group: "Admin Setup"
  subquestions:
  - variable: services.admin.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.admin.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.admin.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.admin.memoryRequest
    label: "Memory Request"
    type: string
    default: 128Mi
  - variable: services.admin.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.admin.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false

- variable: services.live.pullPolicy
  label: "Live Pull Policy"
  type: enum
  options:
  - "Always"
  - "IfNotPresent"
  - "Never"
  default: "Always"
  group: "Live Setup"
  subquestions:
  - variable: services.live.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.live.memoryLimit
    label: "Memory Limit"
    type: string
    default: 2000Mi
  - variable: services.live.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.live.memoryRequest
    label: "Memory Request"
    type: string
    default: 512Mi
  - variable: services.live.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.live.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: env.live_sentry_dsn
    label: "Sentry DSN"
    type: string
    default: ""
  - variable: env.live_sentry_environment
    label: "Sentry Environment"
    type: string
    default: "Development"
  - variable: env.live_sentry_traces_sample_rate
    label: "Sentry Traces Sample Rate"
    type: string
  - variable: env.live_server_secret_key
    label: "Live Server Secret Key"
    type: string
    default: "htbqvBJAgpm9bzvf3r4urJer0ENReatceh"
  - variable: env.export_queue_name
    label: "Export Queue Name"
    description: "RabbitMQ queue name for background PDF/DOCX export jobs consumed by the live-exporter service."
    type: string
    default: "plane-exports"
  - variable: env.export_download_base_url
    label: "Export Download Base URL"
    description: "Base URL for export download redirects. Defaults to licenseDomain with protocol inferred from SSL settings."
    type: string
    default: ""

- variable: services.live_exporter.enabled
  label: "Install Live Exporter Service"
  type: boolean
  default: true
  group: "Live Exporter Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.live_exporter.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.live_exporter.pullPolicy
    label: "Live Exporter Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "Always"
  - variable: services.live_exporter.memoryLimit
    label: "Memory Limit"
    type: string
    default: 2000Mi
  - variable: services.live_exporter.cpuLimit
    label: "CPU Limit"
    type: string
    default: 1000m
  - variable: services.live_exporter.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.live_exporter.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m

- variable: services.silo.enabled
  label: "Install Silo Service"
  type: boolean
  default: true
  group: "Silo Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.silo.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.silo.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.silo.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.silo.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.silo.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.silo.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: env.silo_envs.mq_prefetch_count
    label: "MQ Prefetch Count"
    type: int
    default: 10
  - variable: env.silo_envs.batch_size
    label: "Batch Size"
    type: int
    default: 60
  - variable: env.silo_envs.request_interval
    label: "Request Interval"
    type: int
    default: 400
  - variable: env.silo_envs.importers_queue_name
    label: "Importers Queue Name"
    type: string
    default: "celery"
  - variable: env.silo_envs.sentry_dsn
    label: "Silo Sentry DSN"
    type: string
    default: ""
  - variable: env.silo_envs.sentry_environment
    label: "Silo Sentry Environment"
    type: string
    default: "development"
  - variable: env.silo_envs.sentry_traces_sample_rate
    label: "Silo Sentry Traces Sample Rate"
    type: number
    default: 0.1
  - variable: env.silo_envs.hmac_secret_key
    label: "Silo HMAC Secret Key"
    type: string
    default: ""
  - variable: env.silo_envs.aes_secret_key
    label: "Silo AES Secret Key"
    type: string
    default: "dsOdt7YrvxsTIFJ37pOaEVvLxN8KGBCr"
  - variable: env.silo_envs.cors_allowed_origins
    label: "Silo CORS Allowed Origins"
    type: string
    default: ""
  - variable: env.silo_envs.jira_server_issues_page_size
    label: "Jira Server Issues Page Size"
    type: int
    default: 50
  - variable: env.silo_envs.jira_server_issues_parallel_pages
    label: "Jira Server Issues Parallel Pages"
    type: int
    default: 1
  - variable: env.silo_envs.cursor_webhook_secret
    label: "Cursor Webhook Secret"
    type: string
    default: "TTqazTcoBajYKzIAeIKFZeTX9czAoUsG"
- variable: services.silo.connectors.slack.enabled
  label: "Slack Integration"
  type: boolean
  default: false
  group: "Silo Connectors"
  show_subquestion_if: true
  subquestions:
  - variable: services.silo.connectors.slack.client_id
    label: "Slack Client ID"
    type: string
    default: ""
  - variable: services.silo.connectors.slack.client_secret
    label: "Slack Client Secret"
    type: string
    default: ""
  - variable: services.silo.connectors.slack.base_url
    label: "Slack Base URL"
    type: string
    default: ""
  - variable: services.silo.connectors.slack.signing_secret
    label: "Slack Signing Secret"
    type: string
    default: ""

- variable: services.silo.connectors.github.enabled
  label: "Github App Integration"
  type: boolean
  default: false
  group: "Silo Connectors"
  show_subquestion_if: true
  subquestions:
  - variable: services.silo.connectors.github.client_id
    label: "Github Client ID"
    type: string
    default: ""
  - variable: services.silo.connectors.github.client_secret
    label: "Github Client Secret"
    type: string
    default: ""
  - variable: services.silo.connectors.github.app_name
    label: "Github App Name"
    type: string
    default: ""
  - variable: services.silo.connectors.github.app_id
    label: "Github App ID"
    type: string
    default: ""
  - variable: services.silo.connectors.github.private_key
    label: "Github Private Key"
    type: string
    default: ""
  - variable: services.silo.connectors.github.webhook_secret
    label: "Github Webhook Secret"
    type: string
    default: ""

- variable: services.silo.connectors.gitlab.enabled
  label: "Gitlab App Integration"
  type: boolean
  default: false
  group: "Silo Connectors"
  show_subquestion_if: true
  subquestions:
  - variable: services.silo.connectors.gitlab.client_id
    label: "Gitlab Client ID"
    type: string
    default: ""
  - variable: services.silo.connectors.gitlab.client_secret
    label: "Gitlab Client Secret"
    type: string
    default: ""

- variable: services.silo.connectors.sentry.enabled
  label: "Sentry App Integration"
  type: boolean
  default: false
  group: "Silo Connectors"
  show_subquestion_if: true
  subquestions:
  - variable: services.silo.connectors.sentry.base_url
    label: "Sentry Base URL"
    type: string
    default: ""
  - variable: services.silo.connectors.sentry.client_id
    label: "Sentry Client ID"
    type: string
    default: ""
  - variable: services.silo.connectors.sentry.client_secret
    label: "Sentry Client Secret"
    type: string
    default: ""
  - variable: services.silo.connectors.sentry.integration_slug
    label: "Sentry Integration Slug"
    type: string
    default: ""

- variable: services.silo.connectors.bitbucket.enabled
  label: "Bitbucket Integration"
  type: boolean
  default: false
  group: "Silo Connectors"
  show_subquestion_if: true
  subquestions:
  - variable: services.silo.connectors.bitbucket.client_id
    label: "Bitbucket Client ID"
    type: string
    default: ""
  - variable: services.silo.connectors.bitbucket.client_secret
    label: "Bitbucket Client Secret"
    type: string
    default: ""
  - variable: services.silo.connectors.bitbucket.webhook_secret
    label: "Bitbucket Webhook Secret"
    type: string
    default: ""

- variable: services.silo.connectors.hubspot.enabled
  label: "HubSpot Integration"
  type: boolean
  default: false
  group: "Silo Connectors"
  show_subquestion_if: true
  subquestions:
  - variable: services.silo.connectors.hubspot.client_id
    label: "HubSpot Client ID"
    type: string
    default: ""
  - variable: services.silo.connectors.hubspot.client_secret
    label: "HubSpot Client Secret"
    type: string
    default: ""

- variable: services.monitor.pullPolicy
  label: "Monitor Pull Policy"
  type: enum
  options:
  - "Always"
  - "IfNotPresent"
  - "Never"
  default: "Always"
  group: "Monitor Setup"
  subquestions:
  - variable: services.monitor.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.monitor.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.monitor.memoryRequest
    label: "Memory Request"
    type: string
    default: 128Mi
  - variable: services.monitor.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.monitor.volumeSize
    label: "Volume Size"
    type: string
    default: "100Mi"
  - variable: services.monitor.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false

- variable: services.api.pullPolicy
  label: "API Pull Policy"
  type: enum
  options:
  - "Always"
  - "IfNotPresent"
  - "Never"
  default: "Always"
  group: "API Setup"
  subquestions:
  - variable: services.api.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.api.memoryLimit
    label: "Memory Limit"
    type: string
    default: 2Gi
  - variable: services.api.cpuLimit
    label: "CPU Limit"
    type: string
    default: 1000m
  - variable: services.api.memoryRequest
    label: "Memory Request"
    type: string
    default: 512Mi
  - variable: services.api.cpuRequest
    label: "CPU Request"
    type: string
    default: 200m
  - variable: services.api.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: env.cors_allowed_origins
    label: "CORS Allowed Origins"
    type: string
    default: ""
  - variable: env.sentry_dsn
    label: "Sentry DSN"
    type: string
    default: ""
  - variable: env.sentry_environment
    label: "Sentry Environment"
    type: string
    default: "Development"
  - variable: env.secret_key
    label: "Random Secret Key"
    type: string
    required: true
    default: "60gp0byfz2dvffa45cxl20p1scy9xbpf6d8c5y0geejgkyp1b5"
  - variable: env.api_key_rate_limit
    label: "API Key Rate Limit"
    type: string
    default: "60/minute"
  - variable: env.allow_all_attachment_types
    label: "Allow All Attachment Types"
    type: boolean
    default: false
  - variable: env.enable_drf_spectacular
    label: "Enable DRF Spectacular (OpenAPI)"
    type: boolean
    default: false
  - variable: env.web_url
    label: "Web URL"
    type: string
    default: ""
  - variable: env.webhook_allowed_ips
    label: "Webhook Allowed IPs"
    type: string
    default: ""
  - variable: env.webhook_allowed_hosts
    label: "Webhook Allowed Hosts"
    type: string
    default: ""
  - variable: env.gunicorn_workers
    label: "Gunicorn Workers"
    description: "Number of Gunicorn worker processes for the API server. Recommended: 2 * CPU cores + 1."
    type: int
    default: 1
  - variable: env.gunicorn_max_requests
    label: "Gunicorn Max Requests"
    description: "Maximum number of requests a gunicorn worker handles before being restarted. Set to 0 to disable rotation."
    type: int
    default: 1000
  - variable: env.gunicorn_max_requests_jitter
    label: "Gunicorn Max Requests Jitter"
    description: "Random jitter added to GUNICORN_MAX_REQUESTS to stagger worker restarts. Set to 0 when rotation is disabled."
    type: int
    default: 150
  - variable: env.celery_task_publish_retry
    label: "Celery Task Publish Retry"
    description: "Retry task publishing on transient AMQP failures instead of silently dropping tasks."
    type: boolean
    default: true
  - variable: env.celery_broker_pool_limit
    label: "Celery Broker Pool Limit"
    description: "Maximum number of connections in the Celery broker connection pool. Limits stale connection accumulation."
    type: int
    default: 10
- variable: services.external_api.enabled
  label: "Enable External API"
  type: boolean
  default: false
  group: "External API Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.external_api.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.external_api.memoryLimit
    label: "Memory Limit"
    type: string
    default: 2Gi
  - variable: services.external_api.cpuLimit
    label: "CPU Limit"
    type: string
    default: 1000m
  - variable: services.external_api.memoryRequest
    label: "Memory Request"
    type: string
    default: 512Mi
  - variable: services.external_api.cpuRequest
    label: "CPU Request"
    type: string
    default: 200m
  - variable: services.external_api.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
- variable: services.worker.replicas
  label: "Default Replica Count"
  type: int
  default: 1
  group: "Worker Setup"
  subquestions:
  - variable: services.worker.memoryLimit
    label: "Memory Limit"
    type: string
    default: 2Gi
  - variable: services.worker.cpuLimit
    label: "CPU Limit"
    type: string
    default: 1000m
  - variable: services.worker.memoryRequest
    label: "Memory Request"
    type: string
    default: 1Gi
  - variable: services.worker.cpuRequest
    label: "CPU Request"
    type: string
    default: 200m
- variable: services.worker_importers.enabled
  label: "Enable Importer Worker"
  type: boolean
  default: false
  group: "Importer Worker Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.worker_importers.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.worker_importers.memoryLimit
    label: "Memory Limit"
    type: string
    default: 2Gi
  - variable: services.worker_importers.cpuLimit
    label: "CPU Limit"
    type: string
    default: 1000m
  - variable: services.worker_importers.memoryRequest
    label: "Memory Request"
    type: string
    default: 512Mi
  - variable: services.worker_importers.cpuRequest
    label: "CPU Request"
    type: string
    default: 200m
- variable: services.beatworker.replicas
  label: "Default Replica Count"
  type: int
  default: 1
  group: "Beat Worker Setup"
  subquestions:
  - variable: services.beatworker.memoryLimit
    label: "Memory Limit"
    type: string
    default: 2Gi
  - variable: services.beatworker.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.beatworker.memoryRequest
    label: "Memory Request"
    type: string
    default: 512Mi
  - variable: services.beatworker.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
- variable: services.email_service.enabled
  label: "Enable Email Service"
  type: boolean
  default: false
  group: "Email Service Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.email_service.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.email_service.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.email_service.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.email_service.memoryRequest
    label: "Memory Request"
    type: string
    default: 128Mi
  - variable: services.email_service.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: env.email_service_envs.smtp_domain
    label: "SMTP Domain"
    type: string
    default: ""
  - variable: env.email_service_envs.max_attachment_size
    label: "Max Attachment Size (bytes)"
    type: string
    default: "10485760"
    description: "Maximum email attachment size in bytes (default 10485760 = 10MB)"
  - variable: ssl.issuer
    label: "SSL Issuer"
    type: enum
    options:
    - "http"
    - "cloudflare"
    - "digitalocean"
    default: "http"
  - variable: ssl.server
    label: "Let's Encrypt Server URL"
    type: string
    default: "https://acme-v02.services.api.letsencrypt.org/directory"
  - variable: ssl.email
    label: "Let's Encrypt Reg. Email"
    type: string
    default: "plane@example.com"
  - variable: ssl.token
    label: "Provider API Token"
    type: password
    default: ""
    description: "Not required for 'http' issuer"
    show_if: "ssl.issuer=cloudflare || ssl.issuer=digitalocean"

- variable: services.outbox_poller.enabled
  label: "Enable Outbox Poller"
  type: boolean
  default: false
  group: "Outbox Poller Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.outbox_poller.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.outbox_poller.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.outbox_poller.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.outbox_poller.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.outbox_poller.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.outbox_poller.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: env.outbox_poller_envs.memory_limit_mb
    label: "Memory Limit"
    type: int
    default: 400
  - variable: env.outbox_poller_envs.interval_min
    label: "Interval Min"
    type: number
    default: 0.25
  - variable: env.outbox_poller_envs.interval_max
    label: "Interval Max"
    type: number
    default: 2
  - variable: env.outbox_poller_envs.batch_size
    label: "Batch Size"
    type: int
    default: 250
  - variable: env.outbox_poller_envs.memory_check_interval
    label: "Memory Check Interval"
    type: int
    default: 30
  - variable: env.outbox_poller_envs.pool.size
    label: "Pool Size"
    type: int
    default: 4
  - variable: env.outbox_poller_envs.pool.min_size
    label: "Pool Min Size"
    type: int
    default: 2
  - variable: env.outbox_poller_envs.pool.max_size
    label: "Pool Max Size"
    type: int
    default: 10
  - variable: env.outbox_poller_envs.pool.timeout
    label: "Pool Timeout"
    type: number
    default: 30.0
  - variable: env.outbox_poller_envs.pool.max_idle
    label: "Pool Max Idle"
    type: number
    default: 300.0
  - variable: env.outbox_poller_envs.pool.max_lifetime
    label: "Pool Max Lifetime"
    type: number
    default: 3600.0
  - variable: env.outbox_poller_envs.pool.reconnect_timeout
    label: "Pool Reconnect Timeout"
    type: number
    default: 5.0
  - variable: env.outbox_poller_envs.pool.health_check_interval
    label: "Pool Health Check Interval"
    type: number
    default: 60

- variable: services.automation_consumer.enabled
  label: "Enable Automation Consumer"
  type: boolean
  default: false
  group: "Automation Consumer Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.automation_consumer.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.automation_consumer.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.automation_consumer.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.automation_consumer.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.automation_consumer.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.automation_consumer.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: env.automation_consumer_envs.event_stream_queue_name
    label: "Event Stream Queue Name"
    type: string
    default: "plane.event_stream.automations"
  - variable: env.automation_consumer_envs.event_stream_prefetch
    label: "Event Stream Prefetch"
    type: int
    default: 10
  - variable: env.automation_consumer_envs.exchange_name
    label: "Exchange Name"
    type: string
    default: "plane.event_stream"
  - variable: env.automation_consumer_envs.event_types
    label: "Event Types"
    type: string
    default: "issue"

- variable: services.webhook_consumer.enabled
  label: "Enable Webhook Consumer"
  type: boolean
  default: false
  group: "Webhook Consumer Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.webhook_consumer.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.webhook_consumer.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.webhook_consumer.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.webhook_consumer.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.webhook_consumer.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.webhook_consumer.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: env.webhook_consumer_envs.queue_name
    label: "Webhook Queue Name"
    type: string
    default: "plane.webhook"
  - variable: env.webhook_consumer_envs.prefetch_count
    label: "Webhook Prefetch Count"
    type: int
    default: 10

- variable: services.agent_consumer.enabled
  label: "Enable Agent Consumer"
  type: boolean
  default: false
  group: "Agent Consumer Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.agent_consumer.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.agent_consumer.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.agent_consumer.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.agent_consumer.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.agent_consumer.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.agent_consumer.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: env.agent_consumer_envs.queue_name
    label: "Agent Queue Name"
    type: string
    default: "plane.agent"
  - variable: env.agent_consumer_envs.prefetch_count
    label: "Agent Prefetch Count"
    type: int
    default: 10

- variable: services.iframely.enabled
  label: "Enable Iframely"
  type: boolean
  default: false
  group: "Iframely Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.iframely.image
    label: "Docker Image"
    type: string
    default: "makeplane/iframely:v1.2.0"
  - variable: services.iframely.pullPolicy
    label: "Iframely Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "Always"
  - variable: services.iframely.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.iframely.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.iframely.cpuLimit
    label: "CPU Limit"
    type: string
    default: 1000m
  - variable: services.iframely.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.iframely.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
  - variable: services.iframely.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false

- variable: services.pi.enabled
  label: "Enable Plane AI (PI) Service"
  type: boolean
  default: false
  group: "Plane AI Setup"
  show_subquestion_if: true
  subquestions:
  - variable: services.pi.replicas
    label: "Default Replica Count"
    type: int
    default: 1
  - variable: services.pi.memoryLimit
    label: "Memory Limit"
    type: string
    default: 2Gi
  - variable: services.pi.cpuLimit
    label: "CPU Limit"
    type: string
    default: 1000m
  - variable: services.pi.memoryRequest
    label: "Memory Request"
    type: string
    default: 512Mi
  - variable: services.pi.cpuRequest
    label: "CPU Request"
    type: string
    default: 200m
  - variable: services.pi.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
  - variable: env.pi_envs.follower_postgres_uri
    label: "Follower Postgres URI"
    type: string
    default: ""
  - variable: env.pi_envs.plane_oauth.state_expiry_seconds
    label: "Plane OAuth State Expiry Seconds"
    type: int
    default: 82800
  - variable: env.pi_envs.cors_allowed_origins
    label: "CORS Allowed Origins"
    type: string
    default: ""
  - variable: env.pi_envs.ai_usage_agent_max_tokens_budget
    label: "AI Usage Agent Max Tokens Budget"
    type: string
    default: ""
  - variable: env.pi_envs.ai_usage_enforcement_enabled
    label: "AI Usage Enforcement Enabled"
    type: boolean
    default: true
  - variable: env.pi_envs.celery.vector_sync_enabled
    label: "Vector Sync Enabled"
    type: boolean
    default: false
  - variable: env.pi_envs.celery.vector_sync_interval
    label: "Vector Sync Interval"
    type: int
    default: 3
    show_if: "env.pi_envs.celery.vector_sync_enabled=true"
  - variable: env.pi_envs.celery.workspace_plan_sync_enabled
    label: "Workspace Plan Sync Enabled"
    type: boolean
    default: false
  - variable: env.pi_envs.celery.workspace_plan_sync_interval
    label: "Workspace Plan Sync Interval"
    type: int
    default: 86400
    show_if: "env.pi_envs.celery.workspace_plan_sync_enabled=true"
  - variable: env.pi_envs.celery.docs_sync_enabled
    label: "Docs Sync Enabled"
    type: boolean
    default: false
  - variable: env.pi_envs.celery.docs_sync_interval
    label: "Docs Sync Interval"
    type: int
    default: 86400
    show_if: "env.pi_envs.celery.docs_sync_enabled=true"

  - variable: env.pi_envs.internal_secret
    label: "Plane AI (PI) Internal Secret"
    type: string
    default: "tyfvfqvBJAgpm9bzvf3r4urJer0Ehfdubk"
  - variable: env.pi_envs.log_level
    label: "Log Level"
    type: string
    default: "DEBUG"

- variable: services.pi_worker.replicas
  label: "Default Replica Count"
  type: int
  default: 1
  group: "Plane AI Worker Setup"
  subquestions:
  - variable: services.pi_worker.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.pi_worker.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.pi_worker.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.pi_worker.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m
- variable: services.pi_beat_worker.replicas
  label: "Default Replica Count"
  type: int
  default: 1
  group: "Plane AI Beat Worker Setup"
  subquestions:
  - variable: services.pi_beat_worker.memoryLimit
    label: "Memory Limit"
    type: string
    default: 1000Mi
  - variable: services.pi_beat_worker.cpuLimit
    label: "CPU Limit"
    type: string
    default: 500m
  - variable: services.pi_beat_worker.memoryRequest
    label: "Memory Request"
    type: string
    default: 256Mi
  - variable: services.pi_beat_worker.cpuRequest
    label: "CPU Request"
    type: string
    default: 100m

- variable: services.pi.ai_providers.openai.enabled
  label: "Enable OpenAI Provider"
  type: boolean
  default: false
  group: "Plane AI Providers"
  show_subquestion_if: true
  subquestions:
  - variable: services.pi.ai_providers.openai.base_url
    label: "OpenAI Base URL"
    type: string
    default: ""
  - variable: services.pi.ai_providers.openai.api_key
    label: "OpenAI API Key"
    type: password
    default: ""
- variable: services.pi.ai_providers.claude.enabled
  label: "Enable Claude Provider"
  type: boolean
  default: false
  group: "Plane AI Providers"
  show_subquestion_if: true
  subquestions:
  - variable: services.pi.ai_providers.claude.base_url
    label: "Claude Base URL"
    type: string
    default: ""
  - variable: services.pi.ai_providers.claude.api_key
    label: "Claude API Key"
    type: password
    default: ""
- variable: services.pi.ai_providers.groq.enabled
  label: "Enable Groq Provider"
  type: boolean
  default: false
  group: "Plane AI Providers"
  show_subquestion_if: true
  subquestions:
  - variable: services.pi.ai_providers.groq.base_url
    label: "Groq Base URL"
    type: string
    default: ""
  - variable: services.pi.ai_providers.groq.api_key
    label: "Groq API Key"
    type: password
    default: ""

- variable: services.pi.ai_providers.cohere.enabled
  label: "Enable Cohere Provider"
  type: boolean
  default: false
  group: "Plane AI Providers"
  show_subquestion_if: true
  subquestions:
  - variable: services.pi.ai_providers.cohere.base_url
    label: "Cohere Base URL"
    type: string
    default: ""
  - variable: services.pi.ai_providers.cohere.api_key
    label: "Cohere API Key"
    type: password
    default: ""

- variable: services.pi.ai_providers.custom_llm.enabled
  label: "Enable Custom LLM Provider"
  type: boolean
  default: false
  group: "Plane AI Providers"
  show_subquestion_if: true
  subquestions:
  - variable: services.pi.ai_providers.custom_llm.name
    label: "Custom LLM Name"
    type: string
    default: "GPT-OSS-120B"
  - variable: services.pi.ai_providers.custom_llm.base_url
    label: "Custom LLM Base URL"
    type: string
    default: ""
  - variable: services.pi.ai_providers.custom_llm.api_key
    label: "Custom LLM API Key"
    type: password
    default: ""
  - variable: services.pi.ai_providers.custom_llm.model_key
    label: "Custom LLM Model Key"
    type: string
    default: "gpt-oss-120b"
  - variable: services.pi.ai_providers.custom_llm.max_tokens
    label: "Custom LLM Max Tokens"
    type: int
    default: 128000
  - variable: services.pi.ai_providers.custom_llm.provider
    label: "Custom LLM Provider"
    type: string
    default: ""
  - variable: services.pi.ai_providers.custom_llm.aws_region
    label: "Custom LLM AWS Region"
    type: string
    default: ""

- variable: services.pi.ai_providers.embedding_model.enabled
  label: "Enable Embedding Model"
  type: boolean
  default: false
  group: "Plane AI Providers"
  show_subquestion_if: true
  subquestions:
  - variable: services.pi.ai_providers.embedding_model.name
    label: "Embedding Model Name"
    type: string
    default: ""
  - variable: services.pi.ai_providers.embedding_model.model_id
    label: "Embedding Model ID"
    type: string
    default: ""
  - variable: services.pi.ai_providers.embedding_model.embedding_dimension
    label: "OpenSearch Embedding Dimension"
    type: int
    default: 1536
  - variable: services.pi.ai_providers.embedding_model.aws_access_key
    label: "Embedding Model AWS Access Key"
    type: string
    default: ""
  - variable: services.pi.ai_providers.embedding_model.aws_secret_access_key
    label: "Embedding Model AWS Secret Access Key"
    type: password
    default: ""
  - variable: services.pi.ai_providers.embedding_model.aws_region
    label: "Embedding Model AWS Region"
    type: string
    default: "us-east-1"
  - variable: services.pi.ai_providers.embedding_model.aws_session_token
    label: "Embedding Model AWS Session Token"
    type: password
    default: ""

- variable: services.redis.local_setup
  label: "Install Redis"
  type: boolean
  default: true
  group: "Redis Setup"
  subquestions:
  - variable: services.redis.image
    label: "Docker Image"
    type: string
    default: "valkey/valkey:7.2.11-alpine"
    show_if: "services.redis.local_setup=true"
  - variable: services.redis.pullPolicy
    label: "Redis Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
  - variable: services.redis.servicePort
    label: Port
    type: int
    default: 6379
    show_if: "services.redis.local_setup=true"
  - variable: services.redis.volumeSize
    label: "Volume Size"
    type: string
    default: "500Mi"
    show_if: "services.redis.local_setup=true"
  - variable: services.redis.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
    show_if: "services.redis.local_setup=true"
  - variable: env.remote_redis_url
    label: "Remote Redis URL"
    type: string
    default: "redis://"
    show_if: "services.redis.local_setup=false"

- variable: services.postgres.local_setup
  label: "Install Postgres"
  type: boolean
  default: true
  group: "Postgres Setup"
  # show_subquestion_if: true
  subquestions:
  - variable: services.postgres.image
    label: "Docker Image"
    type: string
    default: "postgres:15.7-alpine"
    show_if: "services.postgres.local_setup=true"
  - variable: services.postgres.pullPolicy
    label: "Postgres Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
    show_if: "services.postgres.local_setup=true"
  - variable: services.postgres.servicePort
    label: Service Port
    type: int
    default: 5432
    show_if: "services.postgres.local_setup=true"
  - variable: services.postgres.volumeSize
    label: "Volume Size"
    type: string
    default: "5Gi"
    show_if: "services.postgres.local_setup=true"
  - variable: env.pgdb_username
    label: "Username"
    type: string
    default: "plane"
    show_if: "services.postgres.local_setup=true"
  - variable: env.pgdb_password
    label: "Password"
    type: password
    default: "plane"
    show_if: "services.postgres.local_setup=true"
  - variable: env.pgdb_name
    label: "DB Name"
    type: string
    default: "plane"
    show_if: "services.postgres.local_setup=true"
  - variable: env.pg_pi_db_name
    label: "Plane AI (PI) DB Name"
    type: string
    default: "plane_pi"
    show_if: "services.postgres.local_setup=true"
  - variable: services.postgres.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
    show_if: "services.postgres.local_setup=true"
  - variable: env.pgdb_remote_url
    label: "Remote URL"
    type: string
    default: "postgresql://"
    show_if: "services.postgres.local_setup=false"
  - variable: env.pg_pi_db_remote_url
    label: "Plane AI (PI) DB Remote URL"
    type: string
    default: ""
    show_if: "services.postgres.local_setup=false"

- variable: services.opensearch.local_setup
  label: "Install OpenSearch"
  type: boolean
  default: true
  group: "OpenSearch Setup"
  # show_subquestion_if: true
  subquestions:
  - variable: services.opensearch.image
    label: "Docker Image"
    type: string
    default: "opensearchproject/opensearch:3.3.2"
    show_if: "services.opensearch.local_setup=true"
  - variable: services.opensearch.pullPolicy
    label: "OpenSearch Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
    show_if: "services.opensearch.local_setup=true"
  - variable: services.opensearch.servicePort
    label: Service Port
    type: int
    default: 9200
    show_if: "services.opensearch.local_setup=true"
  - variable: services.opensearch.volumeSize
    label: "Volume Size"
    type: string
    default: "5Gi"
    show_if: "services.opensearch.local_setup=true"
  - variable: services.opensearch.username
    label: "Username"
    type: string
    default: "plane"
    show_if: "services.opensearch.local_setup=true"
  - variable: services.opensearch.password
    label: "Password"
    type: password
    default: "Secure@Pass#123!%^&*"
    show_if: "services.opensearch.local_setup=true"
  - variable: services.opensearch.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
    show_if: "services.opensearch.local_setup=true"
  - variable: env.opensearch_remote_url
    label: "OpenSearch Remote URL"
    type: string
    default: ""
    show_if: "services.opensearch.local_setup=false"
  - variable: env.opensearch_remote_username
    label: "OpenSearch Remote Username"
    type: string
    default: ""
    show_if: "services.opensearch.local_setup=false"
  - variable: env.opensearch_remote_password
    label: "OpenSearch Remote Password"
    type: password
    default: ""
    show_if: "services.opensearch.local_setup=false"
  - variable: env.opensearch_index_prefix
    label: "Index Prefix"
    type: string
    default: ""
  - variable: env.opensearch_embedding_dimension
    label: "Embedding Dimension"
    type: int
    default: 1536

- variable: services.rabbitmq.local_setup
  label: "Install RabbitMQ"
  type: boolean
  default: true
  group: "RabbitMQ Setup"
  subquestions:
  - variable: services.rabbitmq.image
    label: "Docker Image"
    type: string
    default: "rabbitmq:4.2.9-management-alpine"
    show_if: "services.rabbitmq.local_setup=true"
  - variable: services.rabbitmq.pullPolicy
    label: "RabbitMQ Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
  - variable: services.rabbitmq.servicePort
    label: Service Port
    type: int
    default: 5672
    show_if: "services.rabbitmq.local_setup=true"
  - variable: services.rabbitmq.managementPort
    label: Management Port
    type: int
    default: 15672
    show_if: "services.rabbitmq.local_setup=true"
  - variable: services.rabbitmq.assign_cluster_ip
    label: "Assign ClusterIP"
    type: boolean
    default: false
    show_if: "services.rabbitmq.local_setup=true"
  - variable: services.rabbitmq.volumeSize
    label: "Volume Size"
    type: string
    default: "100Mi"
    show_if: "services.rabbitmq.local_setup=true"
  - variable: services.rabbitmq.default_user
    label: "Username"
    type: string
    default: "plane"
    show_if: "services.rabbitmq.local_setup=true"
  - variable: services.rabbitmq.default_password
    label: "Password"
    type: password
    default: "plane"
    show_if: "services.rabbitmq.local_setup=true"
  - variable: services.rabbitmq.external_rabbitmq_url
    label: "Remote URL"
    type: string
    show_if: "services.rabbitmq.local_setup=false"

- variable: services.minio.local_setup
  label: "Install Minio"
  type: boolean
  default: true
  group: "Storage Setup"
  subquestions:
  - variable: services.minio.image
    label: "Docker Image"
    type: string
    default: "minio/minio:latest"
    show_if: "services.minio.local_setup=true"
  - variable: services.minio.pullPolicy
    label: "Minio Pull Policy"
    type: enum
    options:
    - "Always"
    - "IfNotPresent"
    - "Never"
    default: "IfNotPresent"
  - variable: services.minio.image_mc
    label: "MinIO Client Docker Image"
    type: string
    default: "minio/mc:latest"
    show_if: "services.minio.local_setup=true"
  - variable: services.minio.init_image
    label: "Init Docker Image"
    type: string
    default: "busybox"
    show_if: "services.minio.local_setup=true"
  - variable: services.minio.root_user
    label: "Root User"
    type: string
    default: "admin"
    show_if: "services.minio.local_setup=true"
  - variable: services.minio.root_password
    label: "Root Password"
    type: password
    default: "password"
    show_if: "services.minio.local_setup=true"
  - variable: services.minio.volumeSize
    label: "Volume Size"
    type: string
    default: "5Gi"
    show_if: "services.minio.local_setup=true"
  - variable: services.minio.assign_cluster_ip
    label: "Assign Cluster IP"
    type: boolean
    default: false
    show_if: "services.minio.local_setup=true"
  - variable: env.aws_access_key
    label: "AWS Access Key"
    type: string
    default: ""
    show_if: "services.minio.local_setup=false"
  - variable: env.aws_secret_access_key
    label: "AWS Secret Key"
    type: password
    default: ""
    show_if: "services.minio.local_setup=false"
  - variable: env.aws_region
    label: "AWS Region"
    type: string
    default: ""
    show_if: "services.minio.local_setup=false"
  - variable: env.aws_s3_endpoint_url
    label: "AWS S3 Endpoint URL"
    type: string
    default: ""
    show_if: "services.minio.local_setup=false"
  - variable: env.docstore_bucket
    label: "Bucket Name"
    type: string
    default: "uploads"
  - variable: env.doc_upload_size_limit
    label: "File Upload Size Limit"
    type: string
    default: "5242880"
  - variable: services.minio.env.minio_endpoint_ssl
    label: "Minio Endpoint SSL"
    type: boolean
    default: false
    show_if: "services.minio.local_setup=true"

- variable: env.storage_provider
  label: "Storage Provider"
  description: "S3 (default; covers MinIO and S3-compatible services) or GCS (Google Cloud Storage native mode)."
  type: enum
  options:
  - "S3"
  - "GCS"
  default: "S3"
  group: "Storage Setup"
  subquestions:
  - variable: env.gcs_bucket_name
    label: "GCS Bucket Name"
    description: "Falls back to the Doc Store bucket name when left empty."
    type: string
    default: ""
    show_if: "env.storage_provider=GCS"
  - variable: env.gcs_project_id
    label: "GCP Project ID"
    type: string
    default: ""
    show_if: "env.storage_provider=GCS"
  - variable: env.gcs_credentials_json
    label: "GCS Service Account JSON"
    description: "Inline service-account JSON. Highest-priority credential source. Leave empty to use a mounted file path or GKE Workload Identity."
    type: password
    default: ""
    show_if: "env.storage_provider=GCS"
  - variable: env.gcs_credentials_path
    label: "GCS Credentials File Path"
    description: "In-container path to a service-account file you mount yourself (e.g. /etc/gcs/service-account.json). Used when the inline JSON is empty."
    type: string
    default: ""
    show_if: "env.storage_provider=GCS"

- variable: ingress.enabled
  label: "Enable Ingress"
  type: boolean
  required: true
  default: true
  group: "Ingress"
  # show_subquestion_if: true
  subquestions:
  - variable: ingress.minioHost
    label: "Minio Host"
    type: string
    default: ""
    show_if: "services.minio.local_setup=true"
  - variable: ingress.rabbitmqHost
    label: "Rabbitmq Host"
    type: string
    default: ""
    show_if: "services.rabbitmq.local_setup=true"
  - variable: ingress.controller
    label: "Ingress Controller Type"
    description: "Which kind of ingress resource to render. Supported: 'traefik' a Traefik IngressRoute, 'openshift' one OpenShift Route per path, 'nginx' a standard networking.k8s.io/v1 Ingress using the Ingress Classname below verbatim. REQUIRED when your class name is not exactly 'nginx', 'openshift' or 'traefik*' - left empty, any other class renders no ingress at all."
    type: string
    default: ""
    show_if: "ingress.enabled=true"
  - variable: ingress.ingressClass
    label: "Ingress Classname"
    description: "Class name written to the standard Ingress' spec.ingressClassName. Unused by the Traefik IngressRoute and by OpenShift Routes. While Ingress Controller Type above is empty this also selects which template renders, and only 'nginx', 'openshift' and 'traefik*' are recognised."
    type: string
    required: true
    default: "nginx"
    show_if: "ingress.enabled=true"

- variable: ssl.createIssuer
  label: "Create Issuer"
  type: boolean
  default: false
  group: "Ingress"
  show_if: "ingress.enabled=true"
  show_subquestion_if: true
  subquestions:
  - variable: ssl.issuer
    label: "SSL Issuer"
    type: enum
    options:
    - "http"
    - "cloudflare"
    - "digitalocean"
    default: "http"
  - variable: ssl.server
    label: "Let's Encrypt Server URL"
    type: string
    default: "https://acme-v02.services.api.letsencrypt.org/directory"
  - variable: ssl.email
    label: "Let's Encrypt Reg. Email"
    type: string
    default: "plane@example.com"
  - variable: ssl.token
    label: "Provider API Token"
    type: password
    default: ""
    description: "Not required for 'http' issuer"
    show_if: "ssl.issuer=cloudflare || ssl.issuer=digitalocean"
  - variable: ssl.generateCerts
    label: "Enable to generate certificates"
    type: boolean
    default: false

- variable: ssl.tls_secret_name
  label: "Custom TLS Secret Name"
  type: string
  default: ""
  group: "Ingress"
  show_if: "ssl.createIssuer=false"

- variable: ssl.externalTermination
  label: "TLS Terminated in Front of Plane"
  description: "Enable when TLS is terminated before traffic reaches Plane (cloud load balancer, Cloudflare, service mesh, or a Traefik entrypoint carrying its own cert) and this chart manages no certificate. App URLs are rendered https:// but no tls block is emitted. Leave off if you set a TLS secret name or generate certificates. See the chart README's 'TLS options' section."
  type: boolean
  default: false
  group: "Ingress"
  show_if: "ingress.enabled=true"

- variable: ingress.traefik.entryPoints
  label: "Traefik Entrypoints Override"
  description: "Traefik entrypoints the IngressRoute binds to, e.g. 'websecure'. Leave empty to derive from the SSL settings (websecure when this chart manages a certificate, otherwise web). Required as 'websecure' when TLS is terminated by Traefik's own entrypoint. Ignored unless the controller resolves to traefik."
  type: string
  default: ""
  group: "Ingress"
  show_if: "ingress.enabled=true"

- variable: external_secrets.rabbitmq_existingSecret
  label: "RabbitMQ Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.pgdb_existingSecret
  label: "Postgres Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.opensearch_existingSecret
  label: "OpenSearch Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.doc_store_existingSecret
  label: "Doc Store and Minio Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.app_env_existingSecret
  label: "App Envs Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.live_env_existingSecret
  label: "Live Envs Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.silo_env_existingSecret
  label: "Silo Envs Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.pi_api_env_existingSecret
  label: "Plane AI (PI) API Envs Secrets File Name"
  type: string
  default: ""
  group: "External Secrets"
- variable: external_secrets.otel_env_existingSecret
  label: "OpenTelemetry Envs Secrets File Name"
  description: "Supplies OTEL_EXPORTER_OTLP_HEADERS. Leave blank to let the chart create the Secret from the OTLP Exporter Headers value."
  type: string
  default: ""
  group: "External Secrets"

- variable: observability.otel.enabled
  label: "Enable OpenTelemetry"
  description: "Export traces, logs and metrics from the backend services over OTLP. Off by default."
  type: boolean
  default: false
  group: "OpenTelemetry"
  show_subquestion_if: true
  subquestions:
  - variable: observability.otel.endpoint
    label: "OTLP Endpoint"
    description: "OTLP collector endpoint. An https:// endpoint uses secure gRPC."
    type: string
    default: ""
  - variable: observability.otel.protocol
    label: "OTLP Protocol"
    type: enum
    options:
    - "grpc"
    - "http/protobuf"
    default: "grpc"
  - variable: observability.otel.headers
    label: "OTLP Exporter Headers"
    description: "Extra OTLP exporter headers as k1=v1,k2=v2 (e.g. a collector ingestion/auth key). Stored in a Secret, not a ConfigMap."
    type: string
    default: ""
  - variable: observability.otel.environment
    label: "Deployment Environment"
    description: "Emitted as deployment.environment.name (e.g. prod, staging). Use for cross-service environment filtering."
    type: string
    default: ""
  - variable: observability.otel.resourceAttributes
    label: "Extra Resource Attributes"
    description: "Additional OTel resource attributes as k1=v1,k2=v2."
    type: string
    default: ""
  - variable: observability.otel.sampler
    label: "Trace Sampler"
    description: "always_on captures every trace (recommended for test/debug). In production use parentbased_traceidratio; unlike always_on it honours an upstream traceparent's sampling decision."
    type: enum
    options:
    - "always_on"
    - "parentbased_traceidratio"
    - "traceidratio"
    - "always_off"
    default: "always_on"
  - variable: observability.otel.samplerArg
    label: "Trace Sampler Ratio"
    description: "Sampling ratio 0.0-1.0 for ratio-based samplers. Ignored by always_on."
    type: string
    default: "1.0"
    show_if: "observability.otel.sampler=parentbased_traceidratio || observability.otel.sampler=traceidratio"
  - variable: observability.otel.debugConsole
    label: "Print Spans to Stdout (debug)"
    type: boolean
    default: false
  - variable: observability.otel.frontend.enabled
    label: "Enable Browser Tracing"
    description: "Browser tracing for web/admin/space, served to browsers by the API. Requires a browser OTLP endpoint below."
    type: boolean
    default: false
  - variable: observability.otel.frontend.endpoint
    label: "Browser OTLP Endpoint"
    description: "Public OTLP/HTTP endpoint the browser posts to (must be internet-reachable and CORS-enabled)."
    type: string
    default: ""
    show_if: "observability.otel.frontend.enabled=true"
  - variable: observability.otel.frontend.headers
    label: "Browser OTLP Headers"
    description: "A non-empty value forces the browser exporter onto XHR (required cross-origin; sendBeacon fails CORS)."
    type: string
    default: "x-otlp-browser=1"
    show_if: "observability.otel.frontend.enabled=true"