#apiVersion: argoproj.io/v1alpha1
#kind: Application
#metadata:
#  name: keycloak
#  finalizers:
#  - resources-finalizer.argocd.argoproj.io
#spec:
#  project: default
#  source:
#    repoURL: 'registry-1.docker.io/cloudpirates'
#    path: keycloak
#    targetRevision: 0.*.*
#    chart: keycloak    
#    helm:
#      values: |
#        auth:
#
#        ingress:
#          enabled: true
#          className: "traefik"
#          annotations:
#            kubernetes.io/ingress.class: traefik
#            traefik.ingress.kubernetes.io/router.tls: "true"
#            cert-manager.io/cluster-issuer: lets-encrypt
#            traefik.ingress.kubernetes.io/router.entrypoints: websecure
#          hosts:
#            - host: "keycloak.innovation-hub-niedersachsen.de"
#              paths:
#                - path: /
#                  pathType: "Prefix"
#          tls:
#            - secretName: "keycloak-tls"
#              hosts:
#                - "keycloak.innovation-hub-niedersachsen.de" 
#
#  destination:
#    server: 'https://kubernetes.default.svc'
#    namespace: keycloak
#  syncPolicy:
#    managedNamespaceMetadata:
#      labels: 
#        pod-security.kubernetes.io/enforce: "privileged"
#    automated:
#      selfHeal: true
#      prune: true
#    syncOptions:
#      - CreateNamespace=true