values.yaml

affinity:
  podAntiAffinity:
    preferredDuringSchedulingIgnoredDuringExecution:
      - weight: 100
        podAffinityTerm:
          topologyKey: kubernetes.io/hostname
          labelSelector:
            matchLabels:
              app.kubernetes.io/component: grpc

alertmanager:
  inhibitRules:
    enabled: false
    InhibitAllWhenPodIssues:
      enabled: true
      matches:
        - sourceMatch:
            - name: area
              value: resource
          targetMatch:
            - name: application
              value: hedera-mirror-grpc
          equal:
            - namespace
            - pod

    InhibitGrpcLogAlertWhenHighErrors:
      enabled: true
      matches:
        - sourceMatch:
            - name: alertname
              value: GrpcErrors
          targetMatch:
            - name: alertname
              value: GrpcLogErrors
          equal:
            - namespace
            - pod

annotations: {}

config: {}

# Environment variables to add to the container. The value can either be a string or an EnvVarSource. Evaluated as a template.
env:
  SPRING_CONFIG_ADDITIONAL_LOCATION: "file:/usr/etc/hedera/"
  # FOO:
  #   valueFrom:
  #     secretKeyRef:
  #       name: '{{ .Release.Name }}-custom'
  #       key: BAR

# Add config maps or secrets as environment variables. Evaluated as a template.
envFrom: []
# - secretRef:
#     name: '{{ .Release.Name }}-env'

fullnameOverride: ""

gateway:
  gcp:
    backendPolicy:
      connectionDraining:
        drainingTimeoutSec: 10
      logging:
        enabled: false
      maxRatePerEndpoint: 250  # Requires a change to HPA to take effect
      sessionAffinity:
        type: CLIENT_IP
      timeoutSec: 20
    enabled: true
    healthCheckPolicy:
      config:
        httpHealthCheck:
          port: 8081
          requestPath: "{{ .Values.readinessProbe.httpGet.path }}"
        type: HTTP
      healthyThreshold: 1
  rules:
    - backendRefs:
        - group: "{{ .Values.gateway.target.group }}"
          kind: "{{ .Values.gateway.target.kind }}"
          name: "{{ include \"hedera-mirror-grpc.fullname\" $ }}"
          port: 5600
      matches:
        - method:
            service: com.hedera.mirror.api.proto.ConsensusService
        - method:
            service: com.hedera.mirror.api.proto.NetworkService
        - method:
            service: grpc.reflection.v1alpha.ServerReflection
  target:
    group: ""
    kind: Service

global:
  gateway:
    enabled: false
    hostnames: []
  image: {}
  middleware: false
  namespaceOverride: ""
  podAnnotations: {}

hpa:
  behavior: {}
  enabled: false
  maxReplicas: 3
  metrics:
    - type: Resource
      resource:
        name: cpu
        target:
          type: Utilization
          averageUtilization: 80
  minReplicas: 1

image:
  pullPolicy: IfNotPresent
  pullSecrets: []
  registry: gcr.io
  repository: mirrornode/hedera-mirror-grpc
  tag: ""  # Defaults to the chart's app version

ingress:
  annotations:
    traefik.ingress.kubernetes.io/router.middlewares: '{{ include "hedera-mirror-grpc.namespace" . }}-{{ include "hedera-mirror-grpc.fullname" . }}@kubernetescrd'
  enabled: true
  hosts:
    - host: ""
      paths:
        - "/com.hedera.mirror.api.proto.ConsensusService"
        - "/com.hedera.mirror.api.proto.NetworkService"
        - "/grpc.reflection.v1alpha.ServerReflection"
  tls:
    enabled: false
    secretName: ""

labels: {}

livenessProbe:
  httpGet:
    path: /actuator/health/liveness
    port: http
  initialDelaySeconds: 50
  periodSeconds: 10
  timeoutSeconds: 2

middleware:
  - circuitBreaker:
      expression: NetworkErrorRatio() > 0.10 || ResponseCodeRatio(500, 600, 0, 600) > 0.25
  - retry:
      attempts: 3
      initialInterval: 250ms

nameOverride: ""

nodeSelector: {}

podAnnotations: {}

podDisruptionBudget:
  enabled: false
  # maxUnavailable: 0
  minAvailable: 50%

podSecurityContext:
  fsGroup: 1000
  runAsGroup: 1000
  runAsNonRoot: true
  runAsUser: 1000
  seccompProfile:
    type: RuntimeDefault

priorityClassName: ""

prometheusRules:
  enabled: false
  GrpcErrors:
    annotations:
      description: '{{ $value | humanizePercentage }} gRPC {{ $labels.statusCode }} error rate for {{ $labels.namespace }}/{{ $labels.pod }}'
      summary: "Mirror gRPC API error rate exceeds 5%"
    enabled: true
    expr: sum(rate(grpc_server_processing_duration_seconds_count{application="hedera-mirror-grpc", statusCode!~"CANCELLED|DEADLINE_EXCEEDED|INVALID_ARGUMENT|NOT_FOUND|OK"}[5m])) by (namespace, pod, statusCode) / sum(rate(grpc_server_processing_duration_seconds_count{application="hedera-mirror-grpc"}[5m])) by (namespace, pod, statusCode) > 0.05
    for: 2m
    labels:
      severity: critical
      application: hedera-mirror-grpc

  GrpcHighCPU:
    annotations:
      description: "{{ $labels.namespace }}/{{ $labels.pod }} CPU usage reached {{ $value | humanizePercentage }}"
      summary: "Mirror gRPC API CPU usage exceeds 80%"
    enabled: true
    expr: sum(process_cpu_usage{application="hedera-mirror-grpc"}) by (namespace, pod) / sum(system_cpu_count{application="hedera-mirror-grpc"}) by (namespace, pod) > 0.8
    for: 5m
    labels:
      severity: critical
      application: hedera-mirror-grpc
      area: resource

  GrpcHighDBConnections:
    annotations:
      description: "{{ $labels.namespace }}/{{ $labels.pod }} is using {{ $value | humanizePercentage }} of available database connections"
      summary: "Mirror gRPC API database connection utilization exceeds 75%"
    enabled: true
    expr: sum(hikaricp_connections_active{application="hedera-mirror-grpc"}) by (namespace, pod) / sum(hikaricp_connections_max{application="hedera-mirror-grpc"}) by (namespace, pod) > 0.75
    for: 5m
    labels:
      severity: critical
      application: hedera-mirror-grpc
      area: resource

  GrpcHighFileDescriptors:
    annotations:
      description: "{{ $labels.namespace }}/{{ $labels.pod }} file descriptor usage reached {{ $value | humanizePercentage }}"
      summary: "Mirror gRPC API file descriptor usage exceeds 80%"
    enabled: true
    expr: sum(process_files_open_files{application="hedera-mirror-grpc"}) by (namespace, pod) / sum(process_files_max_files{application="hedera-mirror-grpc"}) by (namespace, pod) > 0.8
    for: 5m
    labels:
      severity: critical
      application: hedera-mirror-grpc
      area: resource

  GrpcHighLatency:
    annotations:
      description: 'High latency of {{ $value | humanizeDuration }} between the main nodes and {{ $labels.namespace }}/{{ $labels.pod }}'
      summary: "Mirror gRPC API consensus to delivery (C2MD) latency exceeds 15s"
    enabled: true
    expr: sum(rate(hedera_mirror_grpc_consensus_latency_seconds_sum{application="hedera-mirror-grpc"}[5m])) by (namespace, pod) / sum(rate(hedera_mirror_grpc_consensus_latency_seconds_count{application="hedera-mirror-grpc"}[5m])) by (namespace, pod) > 15
    for: 1m
    labels:
      severity: critical
      application: hedera-mirror-grpc

  GrpcHighMemory:
    annotations:
      description: "{{ $labels.namespace }}/{{ $labels.pod }} memory usage reached {{ $value | humanizePercentage }}"
      summary: "Mirror gRPC API memory usage exceeds 80%"
    enabled: true
    expr: sum(jvm_memory_used_bytes{application="hedera-mirror-grpc"}) by (namespace, pod) / sum(jvm_memory_max_bytes{application="hedera-mirror-grpc"}) by (namespace, pod) > 0.8
    for: 5m
    labels:
      severity: critical
      application: hedera-mirror-grpc
      area: resource

  GrpcLogErrors:
    annotations:
      description: "Logs for {{ $labels.namespace }}/{{ $labels.pod }} have reached {{ $value }} error messages/s in a 3m period"
      summary: "High rate of log errors"
    enabled: true
    expr: sum(increase(logback_events_total{application="hedera-mirror-grpc", level="error"}[1m])) by (namespace, pod) >= 2
    for: 3m
    labels:
      severity: critical
      application: hedera-mirror-grpc

  GrpcNoPodsReady:
    annotations:
      description: "No gRPC API instances are currently running in {{ $labels.namespace }}"
      summary: No gRPC API instances running
    enabled: true
    expr: sum(kube_pod_status_ready{pod=~".*-grpc-.*",condition="true"}) by (namespace) < 1
    for: 2m
    labels:
      severity: critical
      application: hedera-mirror-grpc
      area: resource

  GrpcNoSubscribers:
    annotations:
      description: "{{ $labels.namespace }} has {{ $value }} subscribers for {{ $labels.type }}"
      summary: "Mirror gRPC API has no subscribers"
    enabled: true
    expr: sum(hedera_mirror_grpc_subscribers{application="hedera-mirror-grpc"}) by (namespace, type) <= 0
    for: 5m
    labels:
      severity: critical
      application: hedera-mirror-grpc

  GrpcQueryLatency:
    annotations:
      description: "High average database query latency of {{ $value | humanizeDuration }} for {{ $labels.namespace }}/{{ $labels.pod }}"
      summary: "Mirror gRPC API query latency exceeds 1s"
    enabled: true
    expr: sum(rate(spring_data_repository_invocations_seconds_sum{application="hedera-mirror-grpc"}[5m])) by (namespace, pod) / sum(rate(spring_data_repository_invocations_seconds_count{application="hedera-mirror-grpc"}[5m])) by (namespace, pod) > 1
    for: 1m
    labels:
      severity: warning
      application: hedera-mirror-grpc

rbac:
  enabled: true

readinessProbe:
  httpGet:
    path: /actuator/health/readiness
    port: http
  initialDelaySeconds: 40
  timeoutSeconds: 2

# Only set if HPA is disabled
# replicas: 1

resources:
  limits:
    cpu: 2
    memory: 2048Mi
  requests:
    cpu: 100m
    memory: 128Mi

revisionHistoryLimit: 3

securityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop: [ALL]
  readOnlyRootFilesystem: true

service:
  annotations:
    traefik.ingress.kubernetes.io/service.serversscheme: h2c
  port: 5600
  type: ClusterIP

serviceAccount:
  create: true
  # The name of the service account to use. If not set and create is true, a name is generated using the fullname template
  name:

serviceMonitor:
  enabled: false
  interval: 30s

terminationGracePeriodSeconds: 60

tolerations: []

updateStrategy:
  type: RollingUpdate
  rollingUpdate:
    maxSurge: 10%
    maxUnavailable: 25%

# Volumes to add to the container. The key is the volume name and the value is the volume mount definition. The same keys should also appear in volumes below.
volumeMounts:
  config:
    mountPath: /usr/etc/hedera

# Volume mounts to add to the container. The key is the volume name and the value is the volume definition. Evaluated as a template.
volumes:
  config:
    secret:
      defaultMode: 420
      secretName: '{{ include "hedera-mirror-grpc.fullname" . }}'