apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: nextgen-external-secrets-operator
spec:
  generators:
    - list:
        elements:
          - env: dev-ap-southeast-1-pioneer
            cluster: dev-ap-southeast-1-pioneer
          - env: dev-ali-apse1-wkly-jxhdvz
            cluster: dev-seed-ali-apse1-wkly-jxhdvz
  template:
    metadata:
      name: "{{env}}-nextgen-external-secrets-operator"
    spec:
      project: default
      sources:
        - repoURL: https://charts.external-secrets.io
          chart: external-secrets
          targetRevision: 0.9.20
          helm:
            releaseName: "external-secrets"
            valueFiles:
              - $values/dev/nextgen-regional-control-plane/external-secrets-operator/envs/{{env}}/values.yaml
        - repoURL: https://github.com/tidbcloud/app-delivery.git
          targetRevision: HEAD
          ref: values
      destination:
        namespace: external-secrets
        name: "{{cluster}}"
      syncPolicy:
        automated:
          selfHeal: true
        syncOptions:
          - CreateNamespace=true
        managedNamespaceMetadata:
          labels:
            pod-identity.alibabacloud.com/injection: "on"
        retry:
          limit: 5
          backoff:
            duration: 5s
            factor: 2
            maxDuration: 3m