kmsvc-manage/k8s/argocd/apps/04-management-service.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: management-service
  namespace: sqs
  annotations:
    argocd.argoproj.io/sync-wave: "2"
    # ArgoCD Image Updater - auto-update on new image push
    argocd-image-updater.argoproj.io/image-list: svc=forgejo.riotpiao.com/rock/kmsvc-manage
    argocd-image-updater.argoproj.io/svc.update-strategy: newest-build
    argocd-image-updater.argoproj.io/svc.allow-tags: regexp:^[0-9a-f]{7}$
    argocd-image-updater.argoproj.io/write-back-method: argocd
spec:
  project: kmsvc
  source:
    repoURL: https://forgejo.riotpiao.com/rock/kmsvc-manage.git
    targetRevision: main
    path: k8s/charts/management-service
    helm:
      values: |
        namespace: sqs
        image:
          repository: forgejo.riotpiao.com/rock/kmsvc-manage
          # On prod branch: built on each commit push via CI workflow
          # Tag is set to the git commit SHA for reproducible deployments
          tag: latest
        env:
          kafkaBrokers: "kmsvc-kafka-bootstrap.sqs.svc.cluster.local:9092"
          redisAddr: "kmsvc-redis-master.sqs.svc.cluster.local:6379"
          authentikIssuerURL: ""
          authentikAudience: ""
        ingress:
          enabled: true
          host: kmsvc.riotpiao.com
          clusterIssuer: homelab-ca
  destination:
    server: https://kubernetes.default.svc
    namespace: sqs
  syncPolicy:
    automated:
      prune: true
      selfHeal: true