# MongoDB - standalone with TLS, credentials sourced from existing secret
architecture: standalone

auth:
  enabled: true
  rootUser: root
  usernames:
    - gravitee
  databases:
    - gravitee
  # Reference pre-created secret instead of inline passwords
  existingSecret: mongodb-credentials

# Enable TLS on MongoDB server
tls:
  enabled: true
  autoGenerated: false
  mTLS:
    enabled: true
  standalone:
    existingSecret: mongodb-tls

extraFlags:
  - "--tlsAllowConnectionsWithoutCertificates"

updateStrategy:
  type: Recreate

persistence:
  enabled: true
  size: 8Gi
  storageClass: local-path

resources:
  requests:
    cpu: 200m
    memory: 512Mi
  limits:
    cpu: 1000m
    memory: 1Gi

service:
  type: ClusterIP