schema: 1
components: []
foundation:
  mode: existing
  layers: []
  kubernetes_version: v1.35.8
  network_plugin: calico
  # The reviewed feature gates of a fresh Kubespray installation (ADR-0023). The GPU hosts already run
  # these in their kubelet configuration; the DRA extended resource fails without them on the control plane.
  feature_gates:
    apiserver: [DynamicResourceAllocation=true, DRAExtendedResource=true]
    controller_manager: [DynamicResourceAllocation=true, DRAExtendedResource=true]
    scheduler: [DynamicResourceAllocation=true, DRAExtendedResource=true]
    kubelet: [DynamicResourceAllocation=true, DRAExtendedResource=true]
storage:
  replicas: 3
  classes: [ceph-block, ceph-filesystem, ceph-bucket]
delivery:
  # Foundation policies may remain observation-only; full services select the reviewed root.
  enabled: false
  root: ''
  registry: registry.pharos-build.svc.cluster.local:5000
  service_selector: {pharos.platform/services: 'true'}
  # Whole compositions this site renders (ADR-0067). None is selected by default.
  compositions: []
identity: {enabled: false}
authentication: {mode: legacy}
ssh_access: {enabled: false}
edge: {enabled: false}
smtp: {enabled: false}
# The cloud Site Agent (project provisioning 5.1) and its Waldur offering. An environment opts in; a site without the
# switch gets no Agent, no offering and no Kubeflow access for its members.
site_agent:
  enabled: false
  # Canonical Project and member IDs come from Metallo's Resource Provisioning; `waldur-stand-in` is the development
  # substitute, which Waldur's own IDs answer for and which grants no accepted-work retention.
  identity_source: metallo