apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: mantisbt
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://gitea.innovation-hub-niedersachsen.de/innohub/charts/raw/main/mantisbt'
    targetRevision: 0.4.*
    chart: mantisbt
    helm:
      values: |
        image:
          repository: xlrl/mantisbt
          tag: "latest"
        
        ingress:
          enabled: true
          className: traefik
          annotations:
            kubernetes.io/ingress.class: traefik
            traefik.ingress.kubernetes.io/router.tls: "true"
            traefik.ingress.kubernetes.io/router.entrypoints: websecure
            cert-manager.io/cluster-issuer: lets-encrypt
          hosts:
            - mantisbt.innovation-hub-niedersachsen.de
          tls:
            - secretName: mantisbt-tls
              hosts:
                - mantisbt.innovation-hub-niedersachsen.de
        
        mantisbt:
          enableAdmin: "0"
          timezone: "Europe/Berlin"
          masterSalt: "shJaiK32W2tABdTZjwRUrZN+90AWLHXaLKiOt1Fwpaw="
        
        persistence:
          enabled: true
          storageClass: longhorn
          size: 10Gi
        
        resources:
          requests:
            memory: 256Mi
            cpu: 100m
          limits:
            memory: 512Mi
            cpu: 500m
        
        mariadb:
          enabled: true
          image:
            tag: "latest"
          auth:
            database: mantisbt
            username: mantisbt
            password: "MantisDBPassword_2024!"
            rootPassword: "RootDBPassword_2024!"
          primary:
            persistence:
              enabled: true
              storageClass: longhorn
              size: 8Gi
            livenessProbe:
              enabled: true
              initialDelaySeconds: 120
              periodSeconds: 10
              timeoutSeconds: 5
              failureThreshold: 3
            readinessProbe:
              enabled: true
              initialDelaySeconds: 30
              periodSeconds: 10
              timeoutSeconds: 5
              failureThreshold: 3

  destination:
    server: 'https://kubernetes.default.svc'
    namespace: mantisbt
  syncPolicy:
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true