From d670c8774a3f5bfa391677f1af14dfeb6da51e60 Mon Sep 17 00:00:00 2001
From: Jarvis <jarvis@api7.ai>
Date: Tue, 31 Mar 2026 16:15:51 +0800
Subject: [PATCH] chore(api7): add max_lifetime and Vault config to dp_manager
 and developer_portal

Add commented-out max_lifetime and Vault database credential configuration
to dp_manager_configuration and developer_portal_configuration database
sections, aligning with the existing dashboard_configuration.

This ensures all API7 components have consistent database configuration
options including Vault integration support.

Also fix minor double-space typo in dp_manager basic_auth comment.
---
 charts/api7/values.yaml | 42 ++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 41 insertions(+), 1 deletion(-)

diff --git a/charts/api7/values.yaml b/charts/api7/values.yaml
index 8637779..62ce8b2 100644
--- a/charts/api7/values.yaml
+++ b/charts/api7/values.yaml
@@ -456,7 +456,27 @@ dp_manager_configuration:
     dsn: "postgres://api7ee:changeme@api7-postgresql:5432/api7ee"
     max_open_conns: 30
     max_idle_time: 30s
+    # max_lifetime: 60s
     timeout: 5s
+    # vault:
+    #   enabled: false
+    #   address: "http://vault:8200"
+    #   namespace: ""
+    #   base_dsn: "postgres://api7-postgresql:5432/api7ee?sslmode=disable" # no username/password
+    #   cred_cache_ttl: 30s
+    #   auth:
+    #     method: "token" # token | approle | kubernetes
+    #     token: ""
+    #     # role_id: ""
+    #     # secret_id: ""
+    #     # role: ""        # for kubernetes auth
+    #     # mount_path: ""  # optional auth mount path
+    #   database:
+    #     mount_path: "database"
+    #     role: "api7ee"
+    #   tls:
+    #     ca_cert: ""
+    #     insecure: false
   jaeger:
     collector_addr: "http://api7-jaeger:4318"
     timeout: 30s
@@ -464,7 +484,7 @@ dp_manager_configuration:
     addr: "http://api7-prometheus-server:9090"
     remote_write_path: "/api/v1/write"
     timeout: "30s"
-    basic_auth:  #  access the prometheus with basic-auth
+    basic_auth:  # access the prometheus with basic-auth
       username: ""  # Basic-auth username. If the username is empty, basic-auth authentication is not performed when requesting prometheus.
       password: ""
     tls:
@@ -514,4 +534,24 @@ developer_portal_configuration:
     dsn: "postgres://api7ee:changeme@api7-postgresql:5432/api7ee"
     max_open_conns: 30
     max_idle_time: 30s
+    # max_lifetime: 60s
     timeout: 5s
+    # vault:
+    #   enabled: false
+    #   address: "http://vault:8200"
+    #   namespace: ""
+    #   base_dsn: "postgres://api7-postgresql:5432/api7ee?sslmode=disable" # no username/password
+    #   cred_cache_ttl: 30s
+    #   auth:
+    #     method: "token" # token | approle | kubernetes
+    #     token: ""
+    #     # role_id: ""
+    #     # secret_id: ""
+    #     # role: ""        # for kubernetes auth
+    #     # mount_path: ""  # optional auth mount path
+    #   database:
+    #     mount_path: "database"
+    #     role: "api7ee"
+    #   tls:
+    #     ca_cert: ""
+    #     insecure: false