apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: mantisbt
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://gitea.innovation-hub-niedersachsen.de/innohub/charts/raw/main/mantisbt'
    targetRevision: 0.4.*
    chart: mantisbt
    helm:
      values: |
        image:
          repository: xlrl/mantisbt
          tag: "latest"
        
        ingress:
          enabled: true
          className: traefik
          annotations:
            kubernetes.io/ingress.class: traefik
            traefik.ingress.kubernetes.io/router.tls: "true"
            traefik.ingress.kubernetes.io/router.entrypoints: websecure
            cert-manager.io/cluster-issuer: lets-encrypt
          hosts:
            - mantisbt.innovation-hub-niedersachsen.de
          tls:
            - secretName: mantisbt-tls
              hosts:
                - mantisbt.innovation-hub-niedersachsen.de
        
        mantisbt:
          masterSalt: "sxV60XX070dky/kC7+F2ynWWhM9KsnfR0t3VREIRAXM="
          enableAdmin: "1"
          adminUser: administrator
          adminPassword: "InnoHubADMIN_2024!"
          timezone: "Europe/Berlin"
          email:
            enabled: true
            smtpHost: 192.168.4.125
            smtpPort: 25
            fromAddress: "mantisbt@innovation-hub-niedersachsen.de"
            fromName: "InnoHub MantisBT"
        
        persistence:
          enabled: true
          storageClass: longhorn
          size: 10Gi
        
        resources:
          requests:
            memory: 256Mi
            cpu: 100m
          limits:
            memory: 512Mi
            cpu: 500m
        
        mariadb:
          enabled: true
          image:
            tag: "latest"
          auth:
            database: mantisbt
            username: mantisbt
            password: "MantisDBPassword_2024!"
            rootPassword: "RootDBPassword_2024!"
          primary:
            persistence:
              enabled: true
              storageClass: longhorn
              size: 8Gi

  destination:
    server: 'https://kubernetes.default.svc'
    namespace: mantisbt
  syncPolicy:
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true