---
# Namespace must be created first (sync-wave: -1)
apiVersion: v1
kind: Namespace
metadata:
  name: dot-ai
  annotations:
    argocd.argoproj.io/sync-wave: "-1"
---
# SealedSecret created after namespace (sync-wave: 0)
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  name: dot-ai-secrets
  namespace: dot-ai
  annotations:
    argocd.argoproj.io/sync-wave: "0"
spec:
  encryptedData:
    anthropic-api-key: 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
    auth-token: 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
    ui-auth-token: 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
  template:
    metadata:
      creationTimestamp: null
      name: dot-ai-secrets
      namespace: dot-ai
---
# ArgoCD Application syncs last (sync-wave: 1)
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: dot-ai-stack
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "1"
  labels:
    app.kubernetes.io/name: dot-ai-stack
    app.kubernetes.io/part-of: apps
    app.kubernetes.io/managed-by: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: ghcr.io/vfarcic/dot-ai-stack/charts
    chart: dot-ai-stack
    targetRevision: "0.56.0"

    helm:
      releaseName: dot-ai-stack
      values: |
        dot-ai:
          ingress:
            enabled: true
            className: traefik
            host: kubemcp.forteapps.net
          webUI:
            baseUrl: http://kubemcpui.forteapps.net
        dot-ai-ui:
          uiAuth:
            secretRef:
              name: dot-ai-secrets
          ingress:
            enabled: true
            className: traefik
            host: kubemcpui.forteapps.net

  destination:
    server: https://kubernetes.default.svc
    namespace: dot-ai

  syncPolicy:
    automated:
      prune: true
      selfHeal: true
      allowEmpty: false

    syncOptions:
    - Validate=true
    - ServerSideApply=true
    - Replace=false

    retry:
      limit: 5
      backoff:
        duration: 5s
        factor: 2
        maxDuration: 3m

  ignoreDifferences:
  - group: apps
    kind: StatefulSet
    jsonPointers:
    - /spec/volumeClaimTemplates