apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: mattermost
  finalizers:
  - resources-finalizer.argocd.argoproj.io  
spec:
  project: default
  source:
    repoURL: 'https://helm.mattermost.com'
    targetRevision: 6.6.85
    chart: mattermost-team-edition
    helm:
      valuesObject:

        mysql:
          enabled: false    # interne MySQL-Instanz deaktivieren

        postgresql:
          enabled: true     # interne PostgreSQL-Instanz aktivieren
          postgresqlUsername: mmuser
          postgresqlPassword: "mmdbpwd"
          postgresqlDatabase: mattermost
          auth:
            enablePostgresUser: true
          primary:
            persistence:
              enabled: true
              size: 8Gi

        externalDB:
          enabled: false    # interne PostgreSQL wird genutzt

        config: {}

        extraEnvVars:
          - name: MM_SQLSETTINGS_DRIVERNAME
            value: "postgres"
          - name: MM_SQLSETTINGS_DATASOURCE
            value: "postgres://mmuser:mmdbpwd@mattermost-postgresql:5432/mattermost?sslmode=disable&connect_timeout=10"
          - name: MM_WAIT_FOR_DB
            value: "true"

        ingress:
          enabled: true
          hosts:
            - mattermost.innovation-hub-niedersachsen.de
          tls:
            - hosts:
                - mattermost.innovation-hub-niedersachsen.de
              secretName: mattermost-tls
          annotations:
            kubernetes.io/ingress.class: traefik
            cert-manager.io/cluster-issuer: lets-encrypt-staging
            
  destination:
    server: 'https://kubernetes.default.svc'
    namespace: mattermost
  syncPolicy:
    managedNamespaceMetadata:
      labels: 
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true