apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: vault-agent-injector-dev
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "2"
    argocd.argoproj.io/sync-options: Prune=confirm,Delete=confirm
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: cluster-addons-dev
  source:
    repoURL: https://helm.releases.hashicorp.com
    chart: vault
    targetRevision: 0.32.0
    helm:
      values: |
        global:
          externalVaultAddr: http://vault.vault.svc.cluster.local:8200
          tlsDisable: true
        server:
          enabled: false
        injector:
          enabled: true
          authPath: auth/kubernetes
          image:
            repository: hashicorp/vault-k8s
            tag: "1.7.2@sha256:ae3d307658b72a1cf35dab9bdf92c995d45cdc7183af0516857714b5bd0ba84d"
          webhook:
            failurePolicy: Fail
            namespaceSelector:
              matchLabels:
                vault-injection: enabled
          resources:
            requests:
              cpu: 100m
              memory: 128Mi
            limits:
              cpu: 250m
              memory: 256Mi
          agentImage:
            repository: hashicorp/vault
            tag: "1.18.5@sha256:750bb37c1638fa194ab37053a81618c61bb0491ddec6fccac87c07a8e6cd8166"
  destination:
    server: https://kubernetes.default.svc
    namespace: vault
  syncPolicy:
    automated:
      enabled: true
      prune: true
      selfHeal: true
    syncOptions:
      - PruneLast=true
      - FailOnSharedResource=true
    retry:
      limit: 5
      refresh: true
      backoff:
        duration: 5s
        factor: 2
        maxDuration: 3m
  revisionHistoryLimit: 5