apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: cert-manager
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    chart: cert-manager
    repoURL: https://charts.jetstack.io
    targetRevision: 1.11.0
    helm:
      values: |
        installCRDs: true

  destination:
    server: "https://kubernetes.default.svc"
    namespace: security

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
# https://github.com/prometheus-community/helm-charts/issues/1500#issuecomment-1030201685
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: prom-crds
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://github.com/prometheus-community/helm-charts.git
    path: charts/kube-prometheus-stack/crds/
    targetRevision: kube-prometheus-stack-45.7.1
    helm:
      values: |
        tolerations:
          - key: architecture
            operator: Equal
            value: x86
    directory:
      recurse: true

  destination:
    server: "https://kubernetes.default.svc"
    namespace: prometheus

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
    - Replace=true
---
# https://github.com/prometheus-community/helm-charts/issues/1500#issuecomment-1030201685
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: prometheus-community
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    chart: kube-prometheus-stack
    repoURL: https://prometheus-community.github.io/helm-charts
    targetRevision: 45.7.1
    helm:
      parameters:
        - name: grafana.enabled
          value: "false"
        # https://cogarius.medium.com/3-3-complete-guide-to-ci-cd-pipelines-with-drone-io-on-kubernetes-drone-metrics-with-prometheus-c2668e42b03f
        # "Kubernetes configuration"
        - name: prometheus.ingress.enabled
          value: "true"
        - name: prometheus.ingress.ingressClassName
          value: traefik
        - name: prometheus.ingress.hosts[0]
          value: prometheus.avril
        # https://github.com/prometheus-operator/prometheus-operator/issues/5197
        # Updating CRDs to matching version didn't work
        - name: prometheus.prometheusSpec.scrapeInterval
          value: 30s
        - name: prometheus.prometheusSpec.evaluationInterval
          value: 30s
        - name: prometheus.prometheusSpec.storageSpec.volumeClaimTemplate.spec.storageClassName
          value: longhorn
        - name: prometheus.prometheusSpec.storageSpec.volumeClaimTemplate.spec.accessModes[0]
          value: ReadWriteOnce
        - name: prometheus.prometheusSpec.storageSpec.volumeClaimTemplate.spec.resources.requests.storage
          value: 50Gi
        - name: prometheus-node-exporter.prometheus.monitor.relabelings[0].sourceLabels[0]
          value: "__meta_kubernetes_pod_node_name"
        - name: prometheus-node-exporter.prometheus.monitor.relabelings[0].targetLabel
          value: node_name
      skipCrds: true

  destination:
    server: "https://kubernetes.default.svc"
    namespace: prometheus

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: grafana
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    chart: grafana
    repoURL: https://grafana.github.io/helm-charts
    targetRevision: "6.49.0"

    helm:
      values: |
        image:
          tag: "10.1.0"
        tolerations:
          - key: architecture
            operator: Equal
            value: x86
        ingress:
          enabled: true
          hosts:
          - grafana.avril
        persistence:
          enabled: true
          storageClassName: longhorn
          accessModes:
            - ReadWriteMany
        sidecar:
          dashboards:
            enabled: true
            defaultFolderName: General
            label: grafana_dashboard
            labelValue: "1"
            folderAnnotation: grafana_folder
            searchNamespace: ALL
            provider:
              foldersFromFilesStructure: "true"
        datasources:
          datasources.yaml:
            apiVersion: 1
            datasources:
              - name: Prometheus
                type: prometheus
                url: http://prometheus.avril

  destination:
    server: "https://kubernetes.default.svc"
    namespace: grafana

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
# https://github.com/dotdc/grafana-dashboards-kubernetes/blob/master/argocd-app.yml
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: grafana-dashboards-kubernetes
  namespace: argo
  labels:
    app.kubernetes.io/name: grafana-dashboards-kubernetes
    app.kubernetes.io/version: HEAD
    app.kubernetes.io/managed-by: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default # You may need to change this!
  source:
    path: ./
    repoURL: https://github.com/dotdc/grafana-dashboards-kubernetes
    targetRevision: HEAD

  destination:
    server: https://kubernetes.default.svc
    namespace: monitoring
  syncPolicy:
    ## https://argo-cd.readthedocs.io/en/stable/user-guide/auto_sync
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - Replace=true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: grafana-oncall
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    chart: oncall
    repoURL: https://grafana.github.io/helm-charts
    targetRevision: "1.3.20"

    helm:
      values: |
        global:
          storage_class: longhorn

        base_url: grafana.avril
        externalGrafana:
          url: http://grafana.avril
        fullnameOverride: "oncall-ovrd" # Without this, there are clashes between resources (ServiceAccounts, Secrets) that are similarly named between Oncall itself and the underlying Grafana templates. Also this needs to b e short otherwise the batch jobs created have names that are too long

        cert-manager:
          enabled: false
        grafana:
          enabled: false
        ingress:
          enabled: false
        ingress-nginx:
          enabled: false

        database:
          # can be either mysql or postgresql
          type: postgresql
        mariadb:
          enabled: false
        postgresql:
          enabled: true

        engine:
          nodeSelector:
            kubernetes.io/arch: amd64
        redis:
          master:
            nodeSelector:
              kubernetes.io/arch: amd64
          replica:
            nodeSelector:
              kubernetes.io/arch: amd64

  destination:
    server: "https://kubernetes.default.svc"
    namespace: grafana

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
#apiVersion: argoproj.io/v1alpha1
#kind: Application
#metadata:
#  name: grafana-oncall
#  namespace: argo
#  finalizers:
#  - resources-finalizer.argocd.argoproj.io
#spec:
#  project: default
#
#  source:
#    chart: oncall
#    repoURL: https://grafana.github.io/helm-charts
#    targetRevision: "1.3.1"
#
#    helm:
#      values: |
#        global:
#          storageClass: longhorn
#
#        oncall:
#          base_url: oncall.grafana.avril
#          externalGrafana:
#            url: http://grafana.avril
#          fullnameOverride: "oncall-ovrd" # Without this, there are clashes between resources (ServiceAccounts, Secrets) that are similarly named between Oncall itself and the underlying Grafana templates. Also this needs to b e short otherwise the batch jobs created have names that are too long
#          # env:
#          #   - name: FEATURE_TELEGRAM_INTEGRATION_ENABLED
#          #     value: "true"
#          #   - name: TELEGRAM_WEBHOOK_HOST
#          #     valueFrom:
#          #       secretKeyRef:
#          #         name: telegram-webhook-host-secret
#          #         key: url
#
#          image:
#            tag: "v1.3.1-arm64-linux"
#
#          cert-manager:
#            enabled: false
#
#          grafana:
#            enabled: false
#
#          ingress:
#            enabled: false
#
#          ingress-nginx:
#            enabled: false
#
#          rabbitmq:
#            enabled: true
#            image:
#              repository: rabbitmq
#              tag: 3.10.10
#            auth:
#              username: user
#              password: user
#            extraEnvVars:
#              - name: RABBITMQ_DEFAULT_USER
#                value: user
#              - name: RABBITMQ_DEFAULT_PASS
#                value: user
#
#          redis:
#            image:
#              repository: arm64v8/redis
#              tag: 7.0
#
#          mariadb:
#            enabled: false
#
#          # Have to use Postgres because the Mysql setup doesn't permit using existingSecret
#          database:
#            type: postgresql
#
#          postgresql:
#            enabled: true
#            image:
#              repository: arm64v8/postgres
#              tag: 15.1
#
#          # telegram:
#          #   enabled: true
#          #   existingSecret: telegram-auth-secret
#          #   tokenKey: token
#          #   webhookUrl: https://oncall-grafana.scubbo.org
#
#  destination:
#    server: https://kubernetes.default.svc
#    namespace: grafana
#  syncPolicy:
#    ## https://argo-cd.readthedocs.io/en/stable/user-guide/auto_sync
#    automated:
#      prune: true
#      selfHeal: true
#    syncOptions:
#      - CreateNamespace=true
#      - Replace=true
---
# TODO - use Jsonnet or similar to automate building this from all the directories
# (and pull out the common config)
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: jellyfin
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://gitea.scubbo.org/scubbo/helm-charts.git
    targetRevision: HEAD
    path: charts/jellyfin

    helm:
      valueFiles:
      - values.yaml

  destination:
    server: "https://kubernetes.default.svc"
    namespace: jellyfin

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: proton-vpn
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://gitea.scubbo.org/scubbo/helm-charts.git
    targetRevision: HEAD
    path: charts/proton-vpn

    helm:
      valueFiles:
      - values.yaml

  destination:
    server: "https://kubernetes.default.svc"
    namespace: proton-vpn

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: ombi
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://gitea.scubbo.org/scubbo/helm-charts.git
    targetRevision: HEAD
    path: charts/ombi

    helm:
      valueFiles:
      - values.yaml

  destination:
    server: "https://kubernetes.default.svc"
    namespace: ombi

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: drone
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://gitea.scubbo.org/scubbo/helm-charts.git
    targetRevision: HEAD
    path: charts/drone

    helm:
      valueFiles:
      - values.yaml

  destination:
    server: "https://kubernetes.default.svc"
    namespace: drone

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: jackjack-app-of-apps-private
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://gitea.scubbo.org/scubbo/private-apps.git
    targetRevision: HEAD
    path: app-of-apps

  destination:
    server: "https://kubernetes.default.svc"
    namespace: default

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: vault
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    chart: vault
    repoURL: https://helm.releases.hashicorp.com
    targetRevision: 0.25.0
    helm:
      values: |
        global:
          namespace: "vault"
        ui:
          enabled: true
        serverTelemetry:
          serviceMonitor:
            enabled: true
        server:
          ingress:
            enabled: true
            ingressClassName: traefik
            hosts:
              - host: vault.avril
                paths: []

  destination:
    server: "https://kubernetes.default.svc"
    namespace: vault

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: blog
  namespace: argo
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://gitea.scubbo.org/scubbo/blog-infrastructure.git
    targetRevision: HEAD
    path: helm

    helm:
      valueFiles:
      - values.yaml

      parameters:
        - name: targetEnv
          value: prod

  destination:
    server: "https://kubernetes.default.svc"
    namespace: blog

  syncPolicy:
    automated:
      prune: true
    syncOptions:
    - CreateNamespace=true