apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: vault-gke
  namespace: argocd
  annotations:
    # Syncs plain k8s manifests for Vault to the GKE cluster.
    # The Vault Helm release itself is in vault-helm-gke.yaml.
    #
    # Apply to Legion Argo CD after registering the GKE cluster:
    #   1. gcloud container clusters get-credentials neuron-platform \
    #        --region us-central1 --project neuron-785695
    #   2. argocd cluster add <context-name> --name gke-neuron-platform
    #   3. Update GKE_CLUSTER_ENDPOINT in all argocd-apps/*.yaml:
    #        terraform -chdir=servers/gcp output -raw gke_cluster_endpoint
spec:
  project: default
  source:
    repoURL: http://gitea.git.svc.cluster.local:3000/will/infrastructure.git
    targetRevision: main
    path: servers/gcp/k8s/vault
  destination:
    # Replace GKE_CLUSTER_ENDPOINT after `terraform apply`:
    #   terraform -chdir=servers/gcp output -raw gke_cluster_endpoint
    server: https://GKE_CLUSTER_ENDPOINT
    namespace: vault
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true