---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: pocket-id
  namespace: argo-cd
spec:
  destination:
    name: ''
    namespace: apps-roboces
    server: https://kubernetes.default.svc
  sources:
    - repoURL: git.roboces.dev/catalin/fukuops
      chart: pocket-id
      targetRevision: 0.1.3
      helm:
        valuesObject:
          replicaCount: 1
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: false
            runAsUser: 10000
            runAsGroup: 10000
            capabilities:
              drop:
                - all
          service:
            type: LoadBalancer
          ingress:
            enabled: true
            className: "traefik"
            annotations:
              traefik.ingress.kubernetes.io/router.entrypoints: websecure
              traefik.ingress.kubernetes.io/router.tls: "true"
            hosts:
              - host: auth.roboces.dev
                paths:
                  - path: /
                    pathType: Prefix
          resources:
            requests:
              cpu: 250m
              memory: 256Mi
            limits:
              cpu: 500m
              memory: 512Mi
          persistence:
            enabled: true
            storageClass: "truenas-nfs-csi"
            accessMode: ReadWriteMany
            size: 8Gi
          config:
            appUrl: "https://auth.roboces.dev"
            trustProxy: "true"
            uiConfigDisabled: true
            allowUserSignups: "disabled"
          secret:
            existingSecretName: pocket-id-secrets
  project: roboces
  syncPolicy:
    automated:
      prune: true
      selfHeal: true