infisical_argocd_app.yaml

---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: infisical-secrets-operator
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "2"
spec:
  project: infisical
  source:
    # Actual source code: https://github.com/Infisical/infisical/tree/main/helm-charts/secrets-operator
    repoURL: 'https://dl.cloudsmith.io/public/infisical/helm-charts/helm/charts/'
    chart: secrets-operator
    # published versions: https://cloudsmith.io/~infisical/repos/helm-charts/packages/detail/helm/secrets-operator/#versions
    targetRevision: 0.9.1
  destination:
    server: "https://kubernetes.default.svc"
    namespace: infisical
  syncPolicy:
    syncOptions:
     - ApplyOutOfSyncOnly=true
    automated:
      prune: true
      selfHeal: true

---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: mongodb
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "1"
spec:
  project: infisical
  source:
    repoURL: 'registry-1.docker.io'
    chart: bitnamicharts/mongodb
    targetRevision: 16.5.1
    helm:
      # Docs: https://github.com/bitnami/charts/blob/main/bitnami/mongodb/values.yaml
      values: |
        auth:
          ## @param mongodb.auth.enabled Enable custom authentication
          enabled: true
          usernames:
            - "infisical"
          databases:
            - "infisical"
          ## Existing secret with MongoDB credentials
          # keys: mongodb-passwords, mongodb-root-password, mongodb-metrics-password, mongodb-replica-set-key
          existingSecret: "infisical-mongo-credentials"
        persistence:
          enabled: true
          existingClaim: ""
  destination:
    server: "https://kubernetes.default.svc"
    namespace: infisical
  syncPolicy:
    syncOptions:
     - ApplyOutOfSyncOnly=true
    automated:
      prune: true
      selfHeal: true