apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: headlamp
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: "https://kubernetes-sigs.github.io/headlamp/"
    chart: "headlamp"
    targetRevision: 0.*.*
    helm:
      values: |
        config:
          inCluster: true
        
        serviceAccount:
          create: false
          name: headlamp-admin
        
        clusterRoleBinding:
          create: false
        
        # Deaktiviere das automatische Token-Mounting
        automountServiceAccountToken: false
        
        # Mounte stattdessen unser langlebiges Token
        volumes:
          - name: sa-token
            secret:
              secretName: headlamp-admin-token
        
        volumeMounts:
          - name: sa-token
            mountPath: /var/run/secrets/kubernetes.io/serviceaccount
            readOnly: true
        
        ingress:
          enabled: true
          ingressClassName: "traefik"
          annotations:
            traefik.ingress.kubernetes.io/router.entrypoints: web
          hosts:
            - host: headlamp.innohub.local
              paths:
                - path: /
                  type: ImplementationSpecific
        
  destination:
    server: 'https://kubernetes.default.svc'
    namespace: kube-system
    
  syncPolicy:
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true