apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: headlamp
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: "https://kubernetes-sigs.github.io/headlamp/"
    chart: "headlamp"
    targetRevision: 0.*.*
    helm:
      values: |
        config:
          inCluster: false  # ❗ deaktiviert die in-Cluster-Verbindung
          extraArgs: []
        
        env:
          - name: KUBECONFIG
            value: /config/kubeconfig

        serviceAccount:
          create: false
          name: headlamp-admin
        
        clusterRoleBinding:
          create: false
        
        automountServiceAccountToken: false

        volumes:
          - name: sa-token
            secret:
              secretName: headlamp-admin-token
          - name: kubeconfig
            secret:
              secretName: headlamp-kubeconfig

        volumeMounts:
          - name: sa-token
            mountPath: /var/run/secrets/kubernetes.io/serviceaccount
            readOnly: true
          - name: kubeconfig
            mountPath: /config
            readOnly: true
        
        ingress:
          enabled: true
          ingressClassName: "traefik"
          annotations:
            traefik.ingress.kubernetes.io/router.entrypoints: web
          hosts:
            - host: headlamp.innohub.local
              paths:
                - path: /
                  type: ImplementationSpecific
  destination:
    server: 'https://kubernetes.default.svc'
    namespace: kube-system
  syncPolicy:
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true