apiVersion: helm.cattle.io/v1
kind: HelmChart
metadata:
  name: open-webui
  namespace: open-webui
spec:
  repo: https://helm.openwebui.com/
  chart: open-webui
  targetNamespace: open-webui
  # https://artifacthub.io/packages/helm/open-webui/open-webui
  version: 7.7.0
  valuesContent: |-
    ollama:
      enabled: false
      ollamaUrls:
      - "http://ollama.open-webui.svc.cluster.local:11434"
    pipelines:
      enabled: false
    ingress:
      enabled: true
      class: "nginx"
      annotations:
        cert-manager.io/cluster-issuer: "letsencrypt-cluster-issuer"
        nginx.ingress.kubernetes.io/proxy-buffering: "off"
        nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
        nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
        nginx.ingress.kubernetes.io/proxy-body-size: "0"
      host: "ai.keligrubb.com"
      tls: true
      existingSecret: "open-webui-tls"
    persistence:
      enabled: true
      size: 8Gi
    sso:
      enabled: true
      enableRoleManagement: true
      enableGroupManagement: true
      enableSignup: true
      roleManagement:
        rolesClaim: "groups"
        adminRoles: "authentik Admins"
      oidc:
        enabled: true
        providerName: "authentik"
        clientId: "xCwvgZsb5376ZWjvGpjNfagYKseLcnGjBYaqnJwl"
        clientSecret: "WN0CyvBG6tXkUmiXIm3UH7EtOml0UkcHV35jYbuuQ4nDN52jLDwSDg9XEAuEz4hs69FcbNPn8hYl21z2091P6AWOb186kcMr4an2dNIa3D82O092pPadQewQFZXijuNh"
        providerUrl: "https://login.keligrubb.com/application/o/luma/.well-known/openid-configuration"
    extraEnvVars:
      - name: OPENID_REDIRECT_URI
        value: "https://ai.keligrubb.com/oauth/oidc/callback"
      - name: ENABLE_LOGIN_FORM
        value: "False"
      - name: ENABLE_OAUTH_PERSISTENT_CONFIG
        value: "False"
    nodeSelector:
      ai-capable: "true"