# Provider gateway on site-a. It admits only the hub.
fullnameOverride: grid-gateway
image:
  repository: ghcr.io/praxis-proxy/grid-gateway
  tag: v0.1.4
praxisConfig:
  source: render
  render:
    role: provider
    peerTrust:
      digest: <hub leaf digest>
    backends:
      local:
        # The model Service ClusterIP: praxis refuses a hostname that resolves privately.
        endpoint: 10.96.0.20:8000
grid:
  siteName: site-a
gridIdentity:
  tlsSecretName: grid-site-identity
  caSecretName: grid-ca