global:
  image:
    tag: v3.5.1

configs:
  cm:
    url: https://argo.basicstack.de
    application.instanceLabelKey: argocd.argoproj.io/instance
    resource.exclusions: |
      - apiGroups: [cilium.io]
        kinds: [CiliumIdentity, CiliumEndpoint, CiliumEndpointSlice]
      - apiGroups: [kyverno.io, reports.kyverno.io, wgpolicyk8s.io]
        kinds: [PolicyReport, ClusterPolicyReport, EphemeralReport,
                ClusterEphemeralReport, AdmissionReport, ClusterAdmissionReport,
                BackgroundScanReport, ClusterBackgroundScanReport, UpdateRequest]
    oidc.config: |
      name: Pocket ID
      issuer: https://auth.basicstack.de
      clientID: $oidc.pocketid.clientId
      clientSecret: $oidc.pocketid.clientSecret
      requestedScopes: [openid, profile, email, groups]
      requestedIDTokenClaims:
        groups: {essential: true}

  rbac:
    policy.default: role:readonly
    policy.csv: |
      g, argo_admins, role:admin
      p, role:admin, applications, *, */*, allow
      p, role:admin, clusters, *, *, allow
      p, role:admin, repositories, *, *, allow
      p, role:admin, projects, *, *, allow
      p, role:admin, accounts, *, *, allow
      p, role:admin, gpgkeys, *, *, allow
      p, role:admin, certificates, *, *, allow
      p, role:admin, exec, *, *, allow

controller:
  resources:
    requests:
      memory: 256Mi
    limits:
      memory: 512Mi

repoServer:
  resources:
    requests:
      memory: 256Mi
    limits:
      memory: 512Mi

server:
  resources:
    requests:
      memory: 128Mi
    limits:
      memory: 256Mi
  ingress:
    enabled: false

redis:
  resources:
    requests:
      memory: 128Mi
    limits:
      memory: 256Mi

notifications:
  resources:
    requests:
      memory: 64Mi
    limits:
      memory: 128Mi

applicationSet:
  resources:
    requests:
      memory: 128Mi
    limits:
      memory: 256Mi