---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: rustical
  namespace: argo-cd
spec:
  destination:
    name: ''
    namespace: apps-roboces
    server: https://kubernetes.default.svc
  sources:
    - repoURL: git.roboces.dev/catalin/fukuops
      chart: rustical
      targetRevision: 0.1.2
      helm:
        valuesObject:
          replicaCount: 1
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: true
            runAsUser: 10000
            runAsGroup: 10000
            capabilities:
              drop:
                - all
          service:
            type: LoadBalancer
            port: 8001
          ingress:
            enabled: true
            className: "traefik"
            hosts:
              - host: cal.roboces.dev
                paths:
                  - path: /
                    pathType: Prefix
          resources:
            requests:
              cpu: 100m
              memory: 128Mi
            limits:
              cpu: 500m
              memory: 256Mi
          livenessProbe:
            tcpSocket:
              port: 4000
            initialDelaySeconds: 10
            timeoutSeconds: 15
            successThreshold: 1
            failureThreshold: 3
            periodSeconds: 10
          readinessProbe:
            tcpSocket:
              port: 4000
            initialDelaySeconds: 5
            timeoutSeconds: 2
            successThreshold: 1
            failureThreshold: 3
            periodSeconds: 10
          persistence:
            enabled: true
          rustical:
            oidc:
              name: "Authentik"
              issuer: "https://auth.fukurokuju.dev/application/o/rustical/"
              claim_userid: "preffered_username"
              scopes: '["openid", "profile", "groups"]'
              allow_sign_up: "true"
            frontend:
              allow_password_login: "false"
          secret:
            existingSecretName: rustical
  project: roboces
  syncPolicy:
    automated:
      prune: true
      selfHeal: true