values.example.yaml

global:
  nodeAffinity:
    requiredDuringSchedulingIgnoredDuringExecution:
      nodeSelectorTerms:
        - matchExpressions:
            - key: kubernetes.io/hostname
              operator: In
              values:
                - pi-storage1
                - pi-storage2
                - pi-storage3

led-sniffer:
  enabled: true

  image:
    repository: cubbit/neonswarm-led-sniffer
    tag: "latest"
    pullPolicy: Always

  imagePullSecrets:
    - name: regcred

  # Capture parameters.
  #
  # The sniffer watches the ``cni0`` bridge, which sees raw TCP traffic
  # entering or leaving pods on this node (before flannel VXLAN
  # encapsulation). The BPF filter restricts both source and destination
  # to the flannel pod CIDR, so external NodePort traffic, Netbird and
  # LAN traffic are structurally excluded.
  source: ""                   # optional extra BPF 'host <ip>' filter
  port: ""                     # optional TCP port (empty = any pod-to-pod)
  interface: cni0              # CNI bridge on K3s/flannel
  pod_cidr: 10.42.0.0/16       # flannel pod CIDR; matches src AND dst
  threshold: 30K               # bytes accumulated before animation fires
  delay: 3.0                   # seconds of inactivity before stopping
  filter_size: 200B            # min TCP payload to count (drops ACKs, keepalives)

  # LED / animation parameters
  led_count: 30
  led_pin: D18
  animation_color: "#0065FF"
  animation_speed: 0.09
  animation_spacing: 3

  verbose: false

  privileged: true
  hostNetwork: true

  # Rolling update knobs (applied to the DaemonSet's updateStrategy block).
  updateStrategy:
    maxUnavailable: 1
  minReadySeconds: 10
  terminationGracePeriodSeconds: 30

  # Tolerate node taints if the cluster adds any. Empty by default.
  tolerations: []

  # Extra CLI flags appended to the base args. Useful for debugging without
  # editing the chart template.
  extraArgs: []
  # extraArgs:
  #   - "--animation-duration"
  #   - "5.0"

  # No device hostPath mounts needed. With privileged: true the container
  # already has access to the host's /dev, which is how the NeoPixel
  # driver reaches /dev/mem. Adding /dev/gpiomem or /dev/spidev0.0 here
  # would shadow the real paths with empty directories.
  devices: []

  resources:
    requests:
      cpu: 30m
      memory: 64Mi
    limits:
      cpu: 300m
      memory: 128Mi

  startupProbe:
    enabled: true
    periodSeconds: 10
    failureThreshold: 30
    timeoutSeconds: 3
  livenessProbe:
    enabled: true
    periodSeconds: 15
    failureThreshold: 2
    timeoutSeconds: 3
    stalenessSeconds: 30

lcd-storage:
  enabled: true
  image:
    repository: cubbit/neonswarm-lcd-storage
    tag: latest
    pullPolicy: Always

  namespace: neonswarm
  prefix: agent

  path: /
  address: 0x27
  buttonPin: 17
  interval: 5.0
  verbose: false

  imagePullSecrets:
    - name: regcred

  privileged: true

  # Rolling update knobs.
  updateStrategy:
    maxUnavailable: 1
  minReadySeconds: 10
  terminationGracePeriodSeconds: 30

  tolerations: []

  # Extra CLI flags appended to the base args.
  extraArgs: []

  # ServiceAccount + RBAC:
  serviceAccount:
    create: true
    name: ""       # default: "<release>-lcd-storage-sa"
    annotations: {}

  resources:
    requests:
      cpu: 20m
      memory: 64Mi
    limits:
      cpu: 200m
      memory: 128Mi

  # Startup probe gates the liveness probe until the supervisor loop has
  # touched /tmp/healthy at least once. Worst-case init retry window is
  # ~3 min, so 30 × 10s = 5 min budget before kubelet gives up.
  startupProbe:
    enabled: true
    periodSeconds: 10
    failureThreshold: 30
    timeoutSeconds: 3
  # Liveness probe checks that /tmp/healthy was touched recently.
  # The supervisor loop touches this file on every iteration (success or
  # error), so a stale marker indicates the loop itself is hung.
  livenessProbe:
    enabled: true
    periodSeconds: 15
    failureThreshold: 2
    timeoutSeconds: 3
    stalenessSeconds: 30

  devices:
    - name: i2c-bus
      hostPath: /dev/i2c-1
      mountPath: /dev/i2c-1
      type: CharDevice
    - name: gpiochip4
      hostPath: /dev/gpiochip4
      mountPath: /dev/gpiochip4
      type: CharDevice

agent:
  image:
    repository: cubbit/agent
    tag: latest
    pullPolicy: Always

  imagePullSecrets:
    - name: regcred

  # Agent TCP port. Used for the liveness/readiness probe's tcpSocket
  # check and as the containerPort in the Deployment. The Cubbit agent
  # binary exposes its admin HTTP endpoint on port 80 internally.
  port: 80

  replicas: 1
  strategy: Recreate        # local PV is ReadWriteOnce, so Recreate avoids pod overlap

  terminationGracePeriodSeconds: 60

  tolerations: []

  resources:
    requests:
      cpu: 50m
      memory: 128Mi
    limits:
      cpu: 1000m
      memory: 512Mi

  livenessProbe:
    enabled: true
    initialDelaySeconds: 30
    periodSeconds: 30
    timeoutSeconds: 5
    failureThreshold: 3
  readinessProbe:
    enabled: true
    initialDelaySeconds: 5
    periodSeconds: 10
    timeoutSeconds: 3
    failureThreshold: 3

  # Persistent storage. Each agent gets its own PV pinned to its node via
  # local.path + nodeAffinity, under the per-agent subdirectory
  # ``<hostPathRoot>/<agent-name>``.
  persistence:
    size: 100G
    reclaimPolicy: Retain
    storageClassName: neonswarm-agent-local
    hostPathRoot: /data/agent

  swarm:
    enabled: true
    agents:
      # Replace the placeholders with real values from the Cubbit Composer
      # dashboard. ``secret`` is the --secret argument from the suggested
      # docker run command; ``machineId`` is the --machineId UUID.
      - name: agent1
        secret: "PASTE_AGENT_1_SECRET_HERE"
        machineId: "00000000-0000-0000-0000-000000000001"
        nodeName: pi-storage1
      - name: agent2
        secret: "PASTE_AGENT_2_SECRET_HERE"
        machineId: "00000000-0000-0000-0000-000000000002"
        nodeName: pi-storage2
      - name: agent3
        secret: "PASTE_AGENT_3_SECRET_HERE"
        machineId: "00000000-0000-0000-0000-000000000003"
        nodeName: pi-storage3