git:
  # required, the Git repository from where to download Kubernetes object files
  url: "git@github.com:autoapply/template-kubectl.git"
  # optional, the branch to checkout after cloning (instead of default branch)
  branch: "main"
secrets:
  # optional, the SSH key used to access the repository, can be generated
  # using "ssh-keygen" (make sure to check the correct indentation here!)
  ssh: |
    -----BEGIN RSA PRIVATE KEY-----
    MIIJKQIBAAKCAgEA0tI0gtK7uc60kiQ1RcVAcg2r896uXZR5qWAPZbC53g5iwqwb
    VqRydbSMzuOlSXu7EL2h...
    -----END RSA PRIVATE KEY-----
  # optional, the credentials that will be used to access the Docker registry
  dockercfg: ""
  # optional, the yaml-crypt keys to decrypt secret files in the repository
  # see https://github.com/autoapply/yaml-crypt for more information
  yaml-crypt:
    - ""
  # optional, the parameters that should be passed to sops
  # see https://github.com/mozilla/sops#usage for more information
  # on which environment variables are required for decryption
  sops:
    SOPS_PGP_FP: "28A4E3742FF30047277C32E266C52CA05F3FB2E4"
  # optional, the GPG keys to import
  # (make sure to check the correct indentation here!)
  gpg: |
    -----BEGIN PGP PRIVATE KEY BLOCK-----

    lQOXBF0XaMUBCADOE9jWQ7PwwT+Dlb6SnRsaff9FkAusFORfpqWSS2DCkxJPZLOK
    dfM5RAqVCLq+O2N...
    -----END PGP PRIVATE KEY BLOCK-----
  # values added here will be available as environment variables
  others:
    SOME_OTHER_SECRET: "secret123"
kubernetes:
  # optional, the namespace where the autoapply objects will be created
  namespace: "autoapply"
  # optional, the namespaces the autoapply service account will have access to
  namespace-access:
    - "autoapply"
  # optional, additional labels to add
  labels:
    label1: "some-value"
  # optional, additional annotations to add
  annotation:
    annotation1: "some text"
  # optional, but recommended, kubernetes resource limits
  resources:
    memory: 128Mi
    cpu: 15m
  # optional, whether to give autoapply full access to the cluster
  # when "true", the "cluster-admin" role will be assigned to autoapply
  cluster-admin: false
  # optional, the paths within the repository to apply
  paths:
    - "common"
    - "dev"
  # optional, whether to run "kubectl kustomize", see
  # https://kubernetes.io/docs/tasks/manage-kubernetes-objects/kustomization/
  kustomize: false
autoapply:
  # optional, container image to use
  image: autoapply/autoapply
  # optional, time to pause between runs
  sleep: 30