apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  annotations:
    argocd.argoproj.io/client-side-apply-migration-manager: argocd-controller
    argocd.argoproj.io/sync-wave: "3"
  name: redoost
  namespace: argocd
spec:
  destination:
    namespace: redoost
    server: https://kubernetes.default.svc
  project: default
  sources:
    - repoURL: https://github.com/whyredfire/redoost.git
      targetRevision: main
      path: chart
      helm:
        values: |
          appOrigin: https://redoost.whyredfire.dev
          sitesOrigin: https://whyredfire.dpdns.org
          httpRoute:
            annotations:
              argocd.argoproj.io/sync-wave: "2"
            app:
              parentRefs:
                - kind: Gateway
                  name: traefik-gateway
                  namespace: traefik
                  sectionName: websecure
            sites:
              parentRefs:
                - kind: Gateway
                  name: traefik-gateway
                  namespace: traefik
                  sectionName: websecure-dpdns
          s3:
            endpoint: http://garage.garage.svc.cluster.local:3900
            publicEndpoint: https://s3.whyredfire.dev
            websiteUpstream: garage.garage.svc.cluster.local:3902
            bucket: redoost-sites
            existingSecret: redoost-s3
          database:
            existingSecret: redoost-db
          auth:
            existingSecret: redoost-auth
            oidc:
              issuer: https://accounts.google.com
              provider: google
              clientId: 197461299437-5uvtgdgfoaqnm5e8un1h92286393gjlf.apps.googleusercontent.com
          networkPolicy:
            enabled: true
            gateway:
              - namespaceSelector:
                  matchLabels:
                    kubernetes.io/metadata.name: traefik
            s3:
              - namespaceSelector:
                  matchLabels:
                    kubernetes.io/metadata.name: garage
                podSelector:
                  matchLabels:
                    app.kubernetes.io/name: garage
            database:
              - namespaceSelector:
                  matchLabels:
                    kubernetes.io/metadata.name: postgres
                podSelector:
                  matchLabels:
                    cnpg.io/cluster: postgres
    - path: apps/redoost
      repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
      targetRevision: main
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true