apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: headlamp
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: https://kubernetes-sigs.github.io/headlamp
    chart: headlamp
    targetRevision: 0.45.0
    helm:
      releaseName: headlamp
      values: |
        config:
          oidc:
            secret:
              create: true
              name: headlamp-oidc
            clientID: rke2
            clientSecret: "fQSLqsgMqUWpPXOCaHPd36DAqYN0gjqBW76L8xIDLDtXD2lVsVw3YG4Vlf2F78DslbCZM0aLRDmLLXtz9S9Eas"
            issuerURL: https://auth.dahmens.de/realms/dahmens
            scopes: "openid,profile,email"
            callbackURL: https://headlamp.pit4noshit.de/oidc-callback
        serviceAccount:
          create: true
        clusterRoleBinding:
          create: false
        ingress:
          enabled: true
          ingressClassName: traefik
          annotations:
            cert-manager.io/cluster-issuer: letsencrypt-prod
          hosts:
            - host: headlamp.pit4noshit.de
              paths:
                - path: /
                  type: ImplementationSpecific
          tls:
            - secretName: headlamp-tls
              hosts:
                - headlamp.pit4noshit.de
  destination:
    server: https://kubernetes.default.svc
    namespace: headlamp
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true