apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: seaweedfs
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://seaweedfs.github.io/seaweedfs/helm'
    chart: seaweedfs
    targetRevision: 4.*.*
    helm:
      values: |
        # Global Konfiguration
        global:
          imagePullPolicy: IfNotPresent
          enableSecurity: true
          monitoring:
            enabled: true

        master:
          enabled: true
          replicas: 1
          data:
            type: "persistentVolumeClaim"
            size: "25Gi"
            storageClass: ""
          logs:
            type: "persistentVolumeClaim"
            size: „5Gi"
            storageClass: ""

          ingress:
            enabled: true
            className: "traefik"
            host: "seaweed.innovation-hub-niedersachsen.de"
            annotations:
              kubernetes.io/ingress.class: "traefik"
              traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
              traefik.ingress.kubernetes.io/router.tls: "true"
              cert-manager.io/cluster-issuer: "lets-encrypt"
            tls:
              - secretName: "seaweed.innovation-hub-niedersachsen.de-tls"
                hosts:
                  - "seaweed.innovation-hub-niedersachsen.de"

        volume:
          enabled: true
          replicas: 1
          dataDirs:
            - name: data
              type: "persistentVolumeClaim"
              storageClass: ""
              size: "100Gi"
          idx:
            type: "persistentVolumeClaim"
            size: "10Gi"
            storageClass: ""

        filer:
          enabled: true
          data:
            type: "persistentVolumeClaim"
            size: "25Gi"
            storageClass: ""
          logs:
            type: "persistentVolumeClaim"
            size: "5Gi"
            storageClass: ""

          ingress:
            enabled: true
            className: "traefik"
            host: "sws3.innovation-hub-niedersachsen.de"
            annotations:
        	  kubernetes.io/ingress.class: "traefik"
        	  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
              traefik.ingress.kubernetes.io/router.tls: "true"
              cert-manager.io/cluster-issuer: "lets-encrypt"
        	tls:
        	  - secretName: "sws3.innovation-hub-niedersachsen.de-tls"
                hosts:
                  - "sws3.innovation-hub-niedersachsen.de"
          s3:
            enabled: true
            port: 8333
            httpsPort: 0
            allowEmptyFolder: false
            # Suffix of the host name, {bucket}.{domainName}
            domainName: ""
            # enable user & permission to s3 (need to inject to all services)
            enableAuth: true
            # set to the name of an existing kubernetes Secret with the s3 json config file
            # should have a secret key called seaweedfs_s3_config with an inline json configure
            existingConfigSecret: "admin-s3-secret"

        # s3:
        #   enabled: true
        #   replicas: 1
        #   bindAddress: 0.0.0.0
        #   port: 8333
        #   # add additional https port
        #   httpsPort: 0
        #   metricsPort: 9327
        #   loggingOverrideLevel: null
        #   # allow empty folders
        #   allowEmptyFolder: true
        #   enableAuth: "true"
        #   existingConfigSecret: "admin-s3-secret"

        #   ingress:
        #     enabled: true
        #     className: "traefik"
        #     host: "sws3.innovation-hub-niedersachsen.de"
        #     # additional ingress annotations for the s3 endpoint
        #     annotations:
        #       kubernetes.io/ingress.class: "traefik"
        #       traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
        #       traefik.ingress.kubernetes.io/router.tls: "true"
        #       cert-manager.io/cluster-issuer: "lets-encrypt"	
        #     tls:
        #       - secretName: "sws3.innovation-hub-niedersachsen.de-tls"
        #         hosts:
        #           - "sws3.innovation-hub-niedersachsen.de"

          # Resource management
        resources:
          limits:
            cpu: "2"
            memory: "2Gi"
          requests:
            cpu: "500m"
            memory: "1Gi"

  destination:
    server: 'https://kubernetes.default.svc'
    namespace: seaweedfs
  syncPolicy:
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true