keycloak_argocd_app.yaml

---
# First sync wave done in parallel with creating secrets. Must be BEFORE
# keycloak so that keycloak persists it's data between upgrades. Sync policy
# is set to ApplyOutOfSyncOnly=true to create the volume initially only.
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: keycloak-persistence
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "1"
spec:
  project: default
  destination:
    server: "https://kubernetes.default.svc"
    namespace: keycloak
  source:
    repoURL: https://github.com/small-hack/argocd-apps.git
    path: keycloak/persistence/
  syncPolicy:
    syncOptions:
      - ApplyOutOfSyncOnly=true
    automated:
      selfHeal: true

---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: keycloak-external-secrets
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: '1'
spec:
  destination:
    namespace: keycloak
    server: 'https://kubernetes.default.svc'
  source:
    path: keycloak/external_secrets/
    repoURL: 'https://github.com/small-hack/argocd-apps.git'
  project: default
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated:
      prune: true
      selfHeal: true