{{- if .Values.configs.secret.createSecret }}
apiVersion: v1
kind: Secret
metadata:
  name: argocd-secret
  labels:
    app.kubernetes.io/name: {{ include "argo-cd.name" . }}-secret
    helm.sh/chart: {{ include "argo-cd.chart" . }}
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/managed-by: {{ .Release.Service }}
    app.kubernetes.io/part-of: argocd
    app.kubernetes.io/component: {{ .Values.server.name }}
  {{- if .Values.configs.secret.annotations }}
  annotations:
  {{- range $key, $value := .Values.configs.secret.annotations }}
    {{ $key }}: {{ $value | quote }}
  {{- end }}
  {{- end }}
type: Opaque
{{- if or .Values.configs.secret.githubSecret (or .Values.configs.secret.gitlabSecret .Values.configs.secret.bitbucketUUID .Values.configs.secret.bitbucketServerSecret .Values.configs.secret.gogsSecret .Values.configs.secret.argocdServerAdminPassword .Values.configs.secret.argocdServerTlsConfig .Values.configs.secret.extra) }}
# Setting a blank data again will wipe admin password/key/cert
data:
  {{- if .Values.configs.secret.githubSecret }}
  webhook.github.secret: {{ .Values.configs.secret.githubSecret | b64enc }}
  {{- end }}
  {{- if .Values.configs.secret.gitlabSecret }}
  webhook.gitlab.secret: {{ .Values.configs.secret.gitlabSecret | b64enc }}
  {{- end }}
  {{- if .Values.configs.secret.bitbucketServerSecret }}
  webhook.bitbucketserver.secret: {{ .Values.configs.secret.bitbucketServerSecret | b64enc }}
  {{- end }}
  {{- if .Values.configs.secret.bitbucketUUID }}
  webhook.bitbucket.uuid: {{ .Values.configs.secret.bitbucketUUID | b64enc }}
  {{- end }}
  {{- if .Values.configs.secret.gogsSecret }}
  webhook.gogs.secret: {{ .Values.configs.secret.gogsSecret | b64enc }}
  {{- end }}
  {{- if .Values.configs.secret.argocdServerTlsConfig }}
  tls.key: {{ .Values.configs.secret.argocdServerTlsConfig.key | b64enc }}
  tls.crt: {{ .Values.configs.secret.argocdServerTlsConfig.crt | b64enc }}
  {{- end }}
  {{- if .Values.configs.secret.argocdServerAdminPassword }}
  admin.password: {{ .Values.configs.secret.argocdServerAdminPassword | b64enc }}
  admin.passwordMtime: {{ default (date "2006-01-02T15:04:05Z" now) .Values.configs.secret.argocdServerAdminPasswordMtime | b64enc }}
  {{- end }}
  {{- range $key, $value := .Values.configs.secret.extra }}
  {{ $key }}: {{ $value | b64enc }}
  {{- end }}
{{- end }}
{{- end }}