---
# AWX namespace
apiVersion: v1
kind: Namespace
metadata:
  name: awx
---
# Admin password secret — the password is 'REDACTED_PASSWORD' (fleet standard)
apiVersion: v1
kind: Secret
metadata:
  name: awx-admin-password
  namespace: awx
type: Opaque
stringData:
  password: REDACTED_PASSWORD
---
# AWX Custom Resource — single instance, LoadBalancer service
apiVersion: awx.ansible.com/v1beta1
kind: AWX
metadata:
  name: tsys-awx
  namespace: awx
spec:
  service_type: LoadBalancer
  ingress_type: none

  admin_user: admin
  admin_password_secret: awx-admin-password

  # PostgreSQL — bundled, stored on local disk via PVC (k3s local-path)
  postgres_storage_class: local-path
  postgres_storage_requirements:
    requests:
      storage: 8Gi
  postgres_resource_requirements:
    requests:
      memory: 1Gi

  # Resource limits — fit within 12 GB host RAM
  web_resource_requirements:
    requests:
      memory: 1Gi
  task_resource_requirements:
    requests:
      memory: 1Gi