apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: seaweedfs
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://seaweedfs.github.io/seaweedfs/helm'
    chart: seaweedfs
    targetRevision: 4.*.*
    helm:
      values: |
        # Global Konfiguration
        global:
          imagePullPolicy: IfNotPresent
          enableSecurity: true
          monitoring:
            enabled: true

        master:
          enabled: true
          replicas: 1
          data:
            type: "persistentVolumeClaim"
            size: "25Gi"
            storageClass: ""
          logs:
            type: "persistentVolumeClaim"
            size: „5Gi"
            storageClass: ""

          ingress:
            enabled: true
            className: "traefik"
            # host: false for "*" hostname
            host: "seaweed.innovation-hub-niedersachsen.de"
            annotations:
              kubernetes.io/ingress.class: "traefik"
              traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
              traefik.ingress.kubernetes.io/router.tls: "true"
              cert-manager.io/cluster-issuer: "lets-encrypt"
            tls:
              - secretName: "seaweed.innovation-hub-niedersachsen.de-tls"
                hosts:
                  - "seaweed.innovation-hub-niedersachsen.de"

        volume:
          enabled: true
          replicas: 1
          dataDirs:
            - name: data
              type: "persistentVolumeClaim"
              storageClass: ""
              size: "100Gi"
          idx:
            type: "persistentVolumeClaim"
            size: "10Gi"
            storageClass: ""

        filer:
          enabled: true
          data:
            type: "persistentVolumeClaim"
            size: "25Gi"
            storageClass: ""
          logs:
            type: "persistentVolumeClaim"
            size: "5Gi"
            storageClass: ""

        #  ingress:
        #    enabled: true
        #    className: "traefik"
        #    host: "sws3.innovation-hub-niedersachsen.de"
        #    annotations:
        #	  kubernetes.io/ingress.class: "traefik"
        #	  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
        #      traefik.ingress.kubernetes.io/router.tls: "true"
        #      cert-manager.io/cluster-issuer: "lets-encrypt"
        #	tls:
        #	  - secretName: "sws3.innovation-hub-niedersachsen.de-tls"
        #        hosts:
        #          - "sws3.innovation-hub-niedersachsen.de"
        #  s3:
        #    enabled: true
        #    port: 8333
        #    httpsPort: 0
        #    allowEmptyFolder: false
        #    # Suffix of the host name, {bucket}.{domainName}
        #    domainName: ""
        #    # enable user & permission to s3 (need to inject to all services)
        #    enableAuth: true
        #    # set to the name of an existing kubernetes Secret with the s3 json config file
        #    # should have a secret key called seaweedfs_s3_config with an inline json configure
        #    existingConfigSecret: "admin-s3-secret"

        s3:
          enabled: true
          replicas: 1
          bindAddress: 0.0.0.0
          port: 8333
          # add additional https port
          httpsPort: 0
          metricsPort: 9327
          loggingOverrideLevel: null
          # allow empty folders
          allowEmptyFolder: true
          enableAuth: "true"
          existingConfigSecret: "admin-s3-secret"

          ingress:
            enabled: true
            className: "traefik"
            host: "sws3.innovation-hub-niedersachsen.de"
            # additional ingress annotations for the s3 endpoint
            annotations:
              kubernetes.io/ingress.class: "traefik"
              traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
              traefik.ingress.kubernetes.io/router.tls: "true"
              cert-manager.io/cluster-issuer: "lets-encrypt"	
            tls:
              - secretName: "sws3.innovation-hub-niedersachsen.de-tls"
              hosts:
                  - "sws3.innovation-hub-niedersachsen.de"

          # Resource management
          resources:
            limits:
              cpu: "2"
              memory: "2Gi"
            requests:
              cpu: "500m"
              memory: "1Gi"

  destination:
    server: 'https://kubernetes.default.svc'
    namespace: seaweedfs
  syncPolicy:
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true