let _presets = (import "schemas/lib/concerns_presets.ncl").presets in

{
  democratic_csi | default = {
    version                | default = "0.14.6",
    storage_class_name     | default = "democratic-csi-nfs",
    nfs_server             | default = "",
    nfs_share_base_path    | default = "/shared",
    reclaim_policy         | default = 'Retain,
    allow_volume_expansion | default = false,
    access_mode            | default = 'ReadWriteMany,
    operations | default = {
      install   = true,
      reinstall = true,
      delete    = true,
      health    = true,
    },
    # namespace inherited from component.namespace (set per workspace).
    live_check | default = {
      strategy = 'k8s_pods,
      scope    = 'cp_only,
    },

    # ServiceConcerns default — democratic-csi NFS provisioner; infrastructure_glue with custom backup reason.
    concerns | default = _presets.infrastructure_glue & {
      backup | force = { kind = 'disabled, reason = "state in K8s API + NFS server backend; PVCs captured by per-component policies" },
    },
  },
}