# ------------------------------------------------------------------------------
# Platform: cert-manager
# Wave 3 — depends on ESO + 1Password Connect for Cloudflare token
# Multi-source: Helm chart from upstream + ClusterIssuers + ExternalSecret
# ------------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: cert-manager
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "3"
spec:
  project: default
  sources:
    # Source 1: Helm chart from upstream
    - repoURL: https://charts.jetstack.io
      chart: cert-manager
      targetRevision: v1.17.2
      helm:
        valueFiles:
          - $values/cluster/platform/cert-manager/values.yaml
    # Source 2: Repo — values ref + ExternalSecret + ClusterIssuers
    - repoURL: https://gitea.mk-labs.cloud/rblundon/homelab.git
      targetRevision: main
      path: cluster/platform/cert-manager
      ref: values
  destination:
    server: https://kubernetes.default.svc
    namespace: cert-manager
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true