apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: helm-cert-manager
  namespace: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: cert-manager
    server: https://kubernetes.default.svc
  project: default
  source:
    repoURL: https://charts.jetstack.io
    targetRevision: v1.21.3
    chart: cert-manager
    helm:
      parameters:
        - name: crds.enabled
          value: 'true'
      # The controller talks ACME to Let's Encrypt. Give it a trust store
      # without the compromised eMudhra intermediates, see ca-bundle/.
      values: |
        # Lets cert-manager solve HTTP-01 challenges with an HTTPRoute on
        # the Gateway, see cert-manager/prod-cluster-issuer.yaml.
        config:
          gatewayAPI:
            enabled: true
        volumes:
          - name: patched-ca-bundle
            configMap:
              name: patched-ca-bundle
        volumeMounts:
          - name: patched-ca-bundle
            mountPath: /etc/ssl/certs
            readOnly: true
        resources:
          requests:
            cpu: 10m
            memory: 48Mi
        cainjector:
          resources:
            requests:
              cpu: 10m
              memory: 80Mi
        webhook:
          resources:
            requests:
              cpu: 10m
              memory: 32Mi
  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    automated:
      selfHeal: true