apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: sealed-secrets
  namespace: argocd
spec:
  ignoreApplicationDifferences:
  - jsonPointers:
      - /spec/syncPolicy
  goTemplate: true
  goTemplateOptions:
    - missingkey=error
  generators:
    - list:
        elements:
          - environment: production
            namespace: kube-system
            path: manifest/overlays/production
            chartVersion: 2.18.5
  template:
    metadata:
      name: 'sealed-secrets-{{ .environment }}'
      labels:
        app.kubernetes.io/managed-by: argocd
        app.kubernetes.io/name: sealed-secrets
    spec:
      project: default
      sources:
        - repoURL: registry-1.docker.io/bitnamicharts/sealed-secrets
          chart: sealed-secrets
          targetRevision: '{{ .chartVersion }}'
          helm:
            releaseName: sealed-secrets-controller
            valueFiles:
              - $values/{{ .path }}/helm-values/values.yaml
        - repoURL: http://gitea-ha-http.apps:3000/olb42/sealed-secrets.git
          targetRevision: main
          ref: values
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{ .namespace }}'
      syncPolicy:
        automated:
          enabled: true
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=false
          - ApplyOutOfSyncOnly=true
          - ServerSideApply=true