From fa8b6dc0ded945c389e95da51c1c3e0e876ffbf4 Mon Sep 17 00:00:00 2001
From: Danijel Simeunovic <danijel.simeunovic@trumf.no>
Date: Tue, 3 Mar 2026 17:39:44 +0100
Subject: [PATCH] dot-ai

---
 apps/dot-ai-stack.yaml | 96 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 96 insertions(+)
 create mode 100644 apps/dot-ai-stack.yaml

diff --git a/apps/dot-ai-stack.yaml b/apps/dot-ai-stack.yaml
new file mode 100644
index 0000000..e105754
--- /dev/null
+++ b/apps/dot-ai-stack.yaml
@@ -0,0 +1,96 @@
+---
+# Namespace must be created first (sync-wave: -1)
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: dot-ai
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
+---
+# SealedSecret created after namespace (sync-wave: 0)
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: dot-ai-secrets
+  namespace: dot-ai
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
+spec:
+  encryptedData:
+    anthropic-api-key: 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
+    auth-token: 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
+    ui-auth-token: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: dot-ai-secrets
+      namespace: dot-ai
+---
+# ArgoCD Application syncs last (sync-wave: 1)
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: dot-ai-stack
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
+  labels:
+    app.kubernetes.io/name: dot-ai-stack
+    app.kubernetes.io/part-of: apps
+    app.kubernetes.io/managed-by: argocd
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+
+  source:
+    repoURL: ghcr.io/vfarcic/dot-ai-stack/charts
+    chart: dot-ai-stack
+    targetRevision: "0.56.0"
+
+    helm:
+      releaseName: dot-ai-stack
+      values: |
+        dot-ai:
+          ingress:
+            enabled: true
+            className: traefik
+            host: kubemcp.forteapps.net
+          webUI:
+            baseUrl: http://kubemcpui.forteapps.net
+        dot-ai-ui:
+          uiAuth:
+            secretRef:
+              name: dot-ai-secrets
+          ingress:
+            enabled: true
+            className: traefik
+            host: kubemcpui.forteapps.net
+
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: dot-ai
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+      allowEmpty: false
+
+    syncOptions:
+    - Validate=true
+    - ServerSideApply=true
+    - Replace=false
+
+    retry:
+      limit: 5
+      backoff:
+        duration: 5s
+        factor: 2
+        maxDuration: 3m
+
+  ignoreDifferences:
+  - group: apps
+    kind: StatefulSet
+    jsonPointers:
+    - /spec/volumeClaimTemplates