apiVersion: apps/v1
kind: Deployment
metadata:
  name: argocd-repo-server
  namespace: argocd
  annotations:
    glance/parent: argocd
spec:
  template:
    metadata:
      annotations:
        glance/parent: argocd
    spec:
      initContainers:
        - name: copyutil
          image: quay.io/argoproj/argocd:v3.3.6
          command:
            - sh
            - -c
          args:
            - /bin/cp --update=none /usr/local/bin/argocd /var/run/argocd/argocd && /bin/ln -s /var/run/argocd/argocd /var/run/argocd/argocd-cmp-server
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            seccompProfile:
              type: RuntimeDefault
          volumeMounts:
            - mountPath: /var/run/argocd
              name: var-files
      containers:
        - name: argocd-lovely-plugin
          image: ghcr.io/crumbhole/lovely:1.2.4
          command:
            - /var/run/argocd/argocd-cmp-server
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            runAsNonRoot: true
            runAsUser: 999
            seccompProfile:
              type: RuntimeDefault
          volumeMounts:
            - mountPath: /var/run/argocd
              name: var-files
            - mountPath: /home/argocd/cmp-server/plugins
              name: plugins
            - mountPath: /tmp
              name: lovely-tmp
      volumes:
        - name: lovely-tmp
          emptyDir: {}