apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: weave-gitops
  namespace: flux-system
spec:
  interval: 10m
  targetNamespace: flux-system
  chart:
    spec:
      chart: ./charts/gitops-server
      sourceRef:
        kind: GitRepository
        name: weave-gitops
        namespace: flux-system
  install:
    createNamespace: true
    remediation:
      retries: 3
  upgrade:
    remediation:
      retries: 3
  values:
    service:
      type: ClusterIP
      port: 9001
    adminUser:
      create: true
      createClusterRole: true
      createSecret: false  # Secret is managed by External Secret from Doppler
      username: admin
    rbac:
      create: true
      impersonationResourceNames:
        - admin
      viewSecretsResourceNames:
        - cluster-user-auth
        - oidc-auth