apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  finalizers:
    - resources-finalizer.argocd.argoproj.io
  name: dex
spec:
  destination:
    name: in-cluster
    namespace: dex
  project: default
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ApplyOutOfSyncOnly=true
      - ServerSideApply=true
  source:
    repoURL: https://charts.dexidp.io
    chart: dex
    targetRevision: 0.23.0
    helm:
      valuesObject:
        config:
          issuer: https://dex.127.0.0.1.sslip.io
          storage:
            type: kubernetes
            config:
              inCluster: true
          oauth2:
            passwordConnector: local
            skipApprovalScreen: true
          enablePasswordDB: true
          staticPasswords:
            - username: admin
              email: admin@127.0.0.1.sslip.io
              userID: "b34bd9d2-70ed-4ee1-8d22-6e4fc84f8d17"
              hashFromEnv: ADMIN_PASSWORD_HASH
          staticClients:
            - id: argocd
              name: ArgoCD
              redirectURIs:
                - 'https://argocd.127.0.0.1.sslip.io/auth/callback'
              secretEnv: ARGOCD_CLIENT_SECRET
            - id: grafana
              name: Grafana
              redirectURIs:
                - 'https://grafana.127.0.0.1.sslip.io/login/generic_oauth'
              secretEnv: GRAFANA_CLIENT_SECRET
            - id: kiali
              name: Kiali
              redirectURIs:
                - 'https://kiali.127.0.0.1.sslip.io'
              secretEnv: KIALI_CLIENT_SECRET
            - id: temporal
              name: Temporal
              redirectURIs:
                - 'https://temporal.127.0.0.1.sslip.io/auth/sso/callback'
              secretEnv: TEMPORAL_CLIENT_SECRET
        envFrom:
          - secretRef:
              name: dex-secrets
        ingress:
          enabled: true
          className: nginx
          annotations:
            cert-manager.io/cluster-issuer: letsencrypt-prod
          hosts:
            - host: dex.127.0.0.1.sslip.io
              paths:
                - path: /
                  pathType: ImplementationSpecific
          tls:
            - secretName: dex-tls-certificate
              hosts:
                - dex.127.0.0.1.sslip.io