stack.basicstack.de/apps/argocd/values.yaml

global:
  image:
    tag: v3.5.1

configs:
  cm:
    url: https://argo.basicstack.de
    application.instanceLabelKey: argocd.argoproj.io/instance
    resource.exclusions: |
      - apiGroups: [cilium.io]
        kinds: [CiliumIdentity, CiliumEndpoint, CiliumEndpointSlice]
      - apiGroups: [kyverno.io, reports.kyverno.io, wgpolicyk8s.io]
        kinds: [PolicyReport, ClusterPolicyReport, EphemeralReport,
                ClusterEphemeralReport, AdmissionReport, ClusterAdmissionReport,
                BackgroundScanReport, ClusterBackgroundScanReport, UpdateRequest]
    oidc.config: |
      name: Pocket ID
      issuer: https://auth.basicstack.de
      clientID: $argocd-oidc-secret:oidc.pocketid.clientId
      clientSecret: $argocd-oidc-secret:oidc.pocketid.clientSecret
      requestedScopes: [openid, profile, email, groups]
      requestedIDTokenClaims:
        groups: {essential: true}

  rbac:
    policy.default: role:readonly
    policy.csv: |
      g, argo_admins, role:admin
      p, role:admin, applications, *, */*, allow
      p, role:admin, clusters, *, *, allow
      p, role:admin, repositories, *, *, allow
      p, role:admin, projects, *, *, allow
      p, role:admin, accounts, *, *, allow
      p, role:admin, gpgkeys, *, *, allow
      p, role:admin, certificates, *, *, allow
      p, role:admin, exec, *, *, allow

  params:
    server.insecure: "true"

  ssh:
    extraHosts: |
      forgejo.forgejo.svc.cluster.local ssh-rsa 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

controller:
  resources:
    requests:
      memory: 256Mi
    limits:
      memory: 512Mi

repoServer:
  resources:
    requests:
      memory: 256Mi
    limits:
      memory: 512Mi

server:
  resources:
    requests:
      memory: 128Mi
    limits:
      memory: 256Mi
  ingress:
    enabled: false

redis:
  resources:
    requests:
      memory: 128Mi
    limits:
      memory: 256Mi

notifications:
  resources:
    requests:
      memory: 64Mi
    limits:
      memory: 128Mi

applicationSet:
  resources:
    requests:
      memory: 128Mi
    limits:
      memory: 256Mi