argo-cd:
  crds:
    install: true
  configs:
    cm:
      admin.enabled: true
      timeout.reconciliation: 100s
      timeout.reconciliation.jitter: 60s
      url: https://argocd.alexlebens.net
      statusbadge.url: https://argocd.alexlebens.net/
      statusbadge.enabled: true
      dex.config: |
        connectors:
        - config:
            issuer: https://authentik.alexlebens.net/application/o/argocd/
            clientID: $argocd-oidc-secret:client
            clientSecret: $argocd-oidc-secret:secret
            insecureEnableGroups: true
            scopes:
              - openid
              - profile
              - email
          name: authentik
          type: oidc
          id: authentik
    rbac:
      policy.csv: |
        g, ArgoCD Admins, role:admin
    params:
      server.insecure: true
    ssh:
      extraHosts: |
        gitea-ssh.gitea ssh-rsa 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
  server:
    replicas: 2
    ingress:
      enabled: false
    metrics:
      enabled: true
      serviceMonitor:
        enabled: true
  dex:
    enabled: true
  redis-ha:
    enabled: true
    auth: false
  redisSecretInit:
    enabled: true
  controller:
    replicas: 1
    metrics:
      enabled: true
      serviceMonitor:
        enabled: true
  repoServer:
    replicas: 2
    metrics:
      enabled: true
      serviceMonitor:
        enabled: true
  applicationSet:
    replicas: 2
    metrics:
      enabled: true
      serviceMonitor:
        enabled: true