apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: traefik
  namespace: argo-cd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: traefik
  project: default
  source:
    chart: traefik
    helm:
      values: |

        experimental:
          http3:
            enabled: true
          plugins:
            enabled: false
          kubernetesGateway:
            enabled: false

        additionalArguments:
          - "--api.insecure=true"
          - "--ping"
          - "--ping.entrypoint=traefik"

        ports:
          traefik:
            port: 9000
            expose: true
            exposedPort: 9900
            protocol: TCP
          web:
            port: 8080
            exposedPort: 80
            expose: true
            protocol: TCP
            redirectTo: websecure
          websecure:
            port: 4443
            exposedPort: 443
            expose: true
            protocol: TCP
            tls:
              enabled: true
          metrics:
            port: 9102
            expose: false
          udp:
            port: 6666
            protocol: UDP
            expose: true

        tlsOptions:
          default:
            sniStrict: true
            minVersion: VersionTLS12

        service:
          enabled: true
          type: LoadBalancer

        providers:
          kubernetesCRD:
            allowCrossNamespace: true
          kubernetesIngress:
            publishedService:
              enabled: true

        ingressClass:
          enabled: true
          isDefaultClass: true

    repoURL: https://helm.traefik.io/traefik
    targetRevision: 21.2.0
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true