{{- define "argocd-values" }}

argo-cd:
  {{- with index .Values "argocd" "configs" }}
  configs:
    {{- toYaml . | nindent 4 }}
  {{- end }}

  controller:
    metrics:
      enabled: {{ .Values.metrics.enabled }}
  repoServer:
    metrics:
      enabled: {{ .Values.metrics.enabled }}
  server:
    metrics:
      enabled: {{ .Values.metrics.enabled }}

argocd-apps:
  projects:
    - name: kubezero
      namespace: argocd
      description: KubeZero - ZeroDownTime Kubernetes Platform
      sourceRepos:
      - {{ .Values.kubezero.repoURL }}
      {{- with .Values.kubezero.gitSync.repoURL }}
      - {{ . }}
      {{- end }}
      destinations:
      - namespace: '*'
        server: https://kubernetes.default.svc
      clusterResourceWhitelist:
      - group: '*'
        kind: '*'
  applications:
    - name: kubezero-git-sync
      namespace: argocd
      project: kubezero
      source:
        repoURL: {{ .Values.kubezero.gitSync.repoURL }}
        targetRevision: {{ .Values.kubezero.gitSync.targetRevision }}
        path: {{ .Values.kubezero.gitSync.path }}

        directory:
          recurse: true

      destination:
        server: https://kubernetes.default.svc
        namespace: argocd

      {{- with .Values.kubezero.syncPolicy }}
      syncPolicy:
        {{- toYaml . | nindent 8 }}
        {{- end }}

argocd-image-updater:
  enabled: {{ default "false" (index .Values "argocd" "argocd-image-updater" "enabled") }}

  {{- with omit (index .Values "argocd" "argocd-image-updater") "enabled" }}
  {{- toYaml . | nindent 2 }}
  {{- end }}

  {{- if .Values.global.aws }}
  extraEnv:
    - name: AWS_ROLE_ARN
      value: "arn:aws:iam::{{ .Values.global.aws.accountId }}:role/{{ .Values.global.aws.region }}.{{ .Values.global.clusterName }}.argocd-image-updater"
    - name: AWS_WEB_IDENTITY_TOKEN_FILE
      value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
    - name: AWS_STS_REGIONAL_ENDPOINTS
      value: "regional"
    - name: METADATA_TRIES
      value: "0"
    - name: AWS_REGION
      value: {{ .Values.global.aws.region }}
  volumes:
  - name: aws-token
    projected:
      sources:
      - serviceAccountToken:
          path: token
          expirationSeconds: 86400
          audience: "sts.amazonaws.com"
  volumeMounts:
  - name: aws-token
    mountPath: "/var/run/secrets/sts.amazonaws.com/serviceaccount/"
    readOnly: true
  {{- end }}

  metrics:
    enabled: {{ .Values.metrics.enabled }}

{{- if and ( index .Values "argocd" "istio" "enabled" ) .Values.istio.enabled }}
istio:
  {{- with index .Values "argocd" "istio" }}
  {{- toYaml . | nindent 2 }}
  {{- end }}
{{- end }}

{{- end }}

{{- define "argocd-argo" }}
{{- end }}

{{ include "kubezero-app.app" . }}