external_secrets_argocd_appset.yaml

---
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: valkey-external-secrets-app-set
  namespace: argocd
spec:
  goTemplate: true
  # generator allows us to source specific values from an external k8s secret
  generators:
    - plugin:
        configMapRef:
          name: secret-var-plugin-generator
        input:
          parameters:
            secret_vars:
              - valkey_credentials_bitwarden_id
              - global_external_secrets
  template:
    metadata:
      name: valkey-external-secrets
      annotations:
        argocd.argoproj.io/sync-wave: "1"
    spec:
      project: valkey
      destination:
        server: https://kubernetes.default.svc
        namespace: valkey
      syncPolicy:
        syncOptions:
          - ApplyOutOfSyncOnly=true
        automated:
          prune: true
          selfHeal: true
      source:
        repoURL: 'https://github.com/small-hack/argocd-apps.git'
        path: valkey/external_secrets/
        targetRevision: main
        helm:
          valuesObject:
            provider: '{{ .global_external_secrets }}'
            valkeyCredentialsBitwardenID: '{{ .valkey_credentials_bitwarden_id }}'