apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  annotations:
    argocd.argoproj.io/client-side-apply-migration-manager: argocd-controller
    argocd.argoproj.io/sync-wave: "0"
  name: sealed-secrets
  namespace: argocd
spec:
  destination:
    namespace: sealed-secrets
    server: https://kubernetes.default.svc
  project: default
  source:
    chart: sealed-secrets
    helm:
      values: |
        keyrenewperiod: "0"
        # The API is reached by port alone, so the policy doesn't depend on the node's IP
        networkPolicy:
          enabled: true
          egress:
            enabled: true
            kubeapiCidr: 0.0.0.0/0
            kubeapiPort: 6443
        resources:
          limits:
            cpu: 200m
            memory: 128Mi
          requests:
            cpu: 10m
            memory: 32Mi
    repoURL: https://bitnami.github.io/sealed-secrets
    targetRevision: 2.20.0
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true