helmfile.yaml

repositories:
  - name: huma
    url: ghcr.io/huma-engineering/helm-charts
    oci: true
  - name: argo
    url: https://argoproj.github.io/argo-helm

environments:
  default:
    missingFileHandler: Error
    values:
      - argocd:
          enabled: true

releases:
  - name: argocd
    namespace: argocd
    chart: argo/argo-cd
    condition: argocd.enabled
    needs:
      - argocd/argocd-secrets
    version: ~5.37.1
    values:
      - server:
          ingress:
            enabled: true
            annotations:
              external-dns.alpha.kubernetes.io/hostname: argocd-{{ .Environment.Name }}.sbx.huma.com
              nginx.ingress.kubernetes.io/ssl-passthrough: "true"
              nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
            ingressClassName: "nginx"
            hosts:
              - argocd-{{ .Environment.Name }}.sbx.huma.com
            tls:
              - hosts:
                  - argocd-{{ .Environment.Name }}.sbx.huma.com
                secretName: pp-star-sbx-huma-com-secret
          ingressGrpc:
            enabled: true
            annotations:
              external-dns.alpha.kubernetes.io/hostname: grpc.argocd-{{ .Environment.Name }}.sbx.huma.com
              nginx.ingress.kubernetes.io/backend-protocol: "GRPC"
            ingressClassName: "nginx"
            hosts:
              - grpc.argocd-{{ .Environment.Name }}.sbx.huma.com
            tls:
              - hosts:
                  - grpc.argocd-{{ .Environment.Name }}.sbx.huma.com
                secretName: pp-star-sbx-huma-com-secret

  - name: argocd-secrets
    namespace: argocd
    chart: huma/external-secret-resources
    condition: argocd.enabled
    createNamespace: true
    version: ~0.1.0
    values:
      - secretStoreRef:
          kind: ClusterSecretStore
          name: gcp-secret-store
        secrets:
          - name: ghcr-credentials
            dataFrom:
              - pp-common-dockerconfigjson
            type: kubernetes.io/dockerconfigjson
          - name: pp-star-sbx-huma-com-secret
            dataFrom:
              - pp-common-star-sbx-huma-com-crt
            type: kubernetes.io/tls