# ------------------------------------------------------------------------------
# Platform: Cilium — Helm upgrade + LB IPAM + Gateway API
# Wave 4 — no dependencies, Cilium is pre-installed via Talos bootstrap
#
# This Application does two things:
#   1. Manages Cilium itself via Helm (enables Gateway API, keeps config in git)
#   2. Applies LB pool and L2 announcement manifests from repo
#
# IP Allocation:
#   10.1.71.80-.89  — ingress-nginx LB pool
#   10.1.71.90-.99  — Cilium Gateway LB pool
# ------------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: cilium-config
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "4"
spec:
  project: default
  sources:
    # Source 1: Cilium Helm chart — manages Cilium itself
    - repoURL: https://helm.cilium.io
      chart: cilium
      targetRevision: 1.17.4
      helm:
        valueFiles:
          - $values/cluster/platform/cilium-config/values.yaml
    # Source 2: Repo — values ref + lb-pool.yaml + GatewayClass manifests
    - repoURL: https://gitea.mk-labs.cloud/rblundon/homelab.git
      targetRevision: main
      path: cluster/platform/cilium-config/manifests
      ref: values
  destination:
    server: https://kubernetes.default.svc
    namespace: kube-system
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - ServerSideApply=true