apiVersion: apps/v1
kind: Deployment
metadata:
  name: argocd-repo-server
  namespace: argocd
spec:
  template:
    spec:
      initContainers:
        - name: copyutil
          image: quay.io/argoproj/argocd:v3.3.6
          command:
            - sh
            - -c
          args:
            - /bin/cp --update=none /usr/local/bin/argocd /var/run/argocd/argocd && /bin/ln -s /var/run/argocd/argocd /var/run/argocd/argocd-cmp-server
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            seccompProfile:
              type: RuntimeDefault
          volumeMounts:
            - mountPath: /var/run/argocd
              name: var-files
      containers:
        - name: argocd-lovely-plugin
          image: ghcr.io/crumbhole/lovely:1.2.4
          command:
            - /var/run/argocd/argocd-cmp-server
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            runAsNonRoot: true
            runAsUser: 999
            seccompProfile:
              type: RuntimeDefault
          volumeMounts:
            - mountPath: /var/run/argocd
              name: var-files
            - mountPath: /home/argocd/cmp-server/plugins
              name: plugins
            - mountPath: /tmp
              name: lovely-tmp
        # - name: ksops
        #   image: viaductoss/ksops:v4.3.2
        #   command:
        #     - /var/run/argocd/argocd-cmp-server
        #   env:
        #     - name: SOPS_AGE_KEY_FILE
        #       value: /age/key.txt
        #   securityContext:
        #     runAsNonRoot: true
        #     runAsUser: 999
        #   volumeMounts:
        #     - mountPath: /var/run/argocd
        #       name: var-files
        #     - mountPath: /home/argocd/cmp-server/plugins
        #       name: plugins
        #     - mountPath: /home/argocd/cmp-server/config/plugin.yaml
        #       name: argocd-cmp-cm
        #       subPath: ksops.yaml
        #     - mountPath: /age
        #       name: age-key
        #       readOnly: true
        #     - mountPath: /tmp
        #       name: cmp-tmp
      volumes:
      #   - name: argocd-cmp-cm
      #     configMap:
      #       name: argocd-cmp-cm
      #   - name: age-key
      #     secret:
      #       secretName: argocd-age-key
      #   - name: cmp-tmp
      #     emptyDir: {}
        - name: lovely-tmp
          emptyDir: {}