sfmapi {{ .Chart.AppVersion }} installed.

Web service:
  kubectl -n {{ .Release.Namespace }} port-forward svc/{{ include "sfmapi.fullname" . }}-web {{ .Values.web.service.port }}:{{ .Values.web.service.port }}
  curl http://127.0.0.1:{{ .Values.web.service.port }}/healthz

{{- /* Never render composed connection URLs here: with an inline
postgresql.auth.password the URL embeds the real credential, and helm
prints NOTES to stdout on every install/upgrade (and keeps it in
`helm get notes`) — CI logs and scrollback would capture it. Describe
the configured source instead. */}}
Database:
{{- if .Values.postgresql.enabled }}
{{- if .Values.postgresql.auth.existingSecret }}
  bundled postgresql — password from secret {{ .Values.postgresql.auth.existingSecret | quote }}
{{- else }}
  bundled postgresql — inline password (dev only; value not shown)
{{- end }}
{{- else }}
  external — SCENEAPI_DB_URL supplied via env.extraEnv / env.existingSecret
{{- end }}
Redis:
{{- if .Values.redis.enabled }}
  bundled at {{ .Release.Name }}-redis-master:6379
{{- else }}
  external — SCENEAPI_REDIS_URL supplied via env.extraEnv / env.existingSecret
{{- end }}

{{- if not .Values.worker.enabled }}

Worker DaemonSet is disabled. Enable it with:
  helm upgrade --install ... \
    --set worker.enabled=true \
    --set worker.image.repository=ghcr.io/sceneapi/sceneapi-worker

The worker image must contain the colmap_mod / pycolmap wheel built
against your cluster's CUDA + cuDSS versions. See
https://sfmapi.dev/guides/deployment for guidance.
{{- end }}

{{- if eq .Values.env.authMode "api_key" }}

Auth is in api_key mode. Issue a key:
  curl -sX POST http://127.0.0.1:{{ .Values.web.service.port }}/v1/admin/api-keys \
       -H 'Content-Type: application/json' \
       -d '{"tenant_id":"my-tenant","name":"oncall"}'
{{- end }}
