apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: sealed-secrets
  namespace: argocd
spec:
  destination:
    namespace: sealed-secrets
    server: 'https://kubernetes.default.svc'
  sources:
  - repoURL: {{ .Values.cluster_config.manifests }}
    path: {{ .Values.cluster_config.policies }}/sealed-secrets
    targetRevision: HEAD
  - repoURL: 'https://bitnami-labs.github.io/sealed-secrets'
    targetRevision: {{ .Values.sealed_secrets.version }}
    chart: sealed-secrets
    helm:
      values: |
        fullnameOverride: "vault-sealed-secrets" 
  project: sys
  syncPolicy:
    managedNamespaceMetadata:
      labels:
        component: sys
    syncOptions:
      - CreateNamespace=true
      - ApplyOutOfSyncOnly=true
    {{- if .Values.sealed_secrets.autosync }}
    automated:
      prune: true
      # selfHeal: false
    {{- end }}