apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: authentik
  namespace: argo-cd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: authentik
  project: default
  source:
    chart: authentik
    helm:
      values: |

        image:
          repository: ghcr.io/goauthentik/server
          tag: 2022.10.0

        authentik:
          error_reporting:
            enabled: true

        envValueFrom:
          AUTHENTIK_POSTGRESQL__PASSWORD:
            secretKeyRef:
              key: postgres-password
              name: postgres-secret

          AUTHENTIK_SECRET_KEY:
            secretKeyRef:
              key: AUTHENTIK_SECRET_KEY
              name: authentik-secret

        postgresql:
          image:
            registry: ghcr.io
            repository: zcube/bitnami-compat/postgresql
          enabled: true
          auth:
            existingSecret: postgres-secret
        redis:
          enabled: true
          image:
            registry: ghcr.io
            repository: zcube/bitnami-compat/redis

    repoURL: https://charts.goauthentik.io
    targetRevision: 2022.10.0
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true