# NOTE: This file is merged with other values in ./helmfile.d/snippets/env.gotmpl
k8s:
  namespaces:
    - name: argocd
      app: argocd
      disableIstioInjection: true
    - name: cert-manager
      disableIstioInjection: true
    - name: cnpg-system
      app: cnpg
      disableIstioInjection: true
      disablePolicyChecks: true
    - name: default
      disableIstioInjection: true
      disablePolicyChecks: true
    - name: external-dns
      disableIstioInjection: true
    - name: harbor
      app: harbor
    - name: apl-harbor-operator
      disableIstioInjection: true
    - name: git-server
    - name: gitea
    - name: apl-gitea-operator
      disableIstioInjection: true
    - name: apl-operator
      disableIstioInjection: true
    - name: grafana
      app: grafana
    - name: istio-system
      disableIstioInjection: true
    - name: dex
      app: dex
    - name: keycloak
    - name: apl-keycloak-operator
      disableIstioInjection: true
    - name: knative-serving
      app: knative
      disablePolicyChecks: true
      disableIstioInjection: true
    - name: kserve
      app: kserve
      disablePolicyChecks: true
      disableIstioInjection: true
    - name: knative-operator
      app: knative
      disablePolicyChecks: true
      disableIstioInjection: true
    - name: kfp
      app: kubeflow-pipelines
      disablePolicyChecks: true
      disableIstioInjection: true
    - name: kyverno
      app: kyverno
      disableIstioInjection: true
    - name: tekton-dashboard
      app: tekton-pipelines
    - name: tekton-pipelines
      disableIstioInjection: true
      disablePolicyChecks: true
    - name: tekton-triggers
      disableIstioInjection: true
      disablePolicyChecks: true
    - name: otel
      app: otel
      disableIstioInjection: true
    - name: maintenance
      disableIstioInjection: true
    - name: monitoring
      disableIstioInjection: true
    - name: otomi
    - name: rabbitmq
      app: rabbitmq
      disableIstioInjection: true
    - name: redis
      app: prometheus
      disableIstioInjection: true
    - name: team-admin
    - name: trivy-operator
      app: trivy
      disableIstioInjection: true
      disablePolicyChecks: true
    - name: sealed-secrets
      app: sealed-secrets
    - name: external-secrets
      app: external-secrets
      disableIstioInjection: true
    - name: apl-secrets
      disableIstioInjection: true
    - name: policy-reporter
      app: policy-reporter
      disablePolicyChecks: true
      disableIstioInjection: true

adminApps:
  - name: alertmanager
    tags: [alerting, observability]
    deps: [prometheus]
    ownHost: true
  - name: argocd
    tags: [cicd, gitops]
    isShared: true
    ownHost: true
    oidcCallbackPath: /auth/callback
  - name: cert-manager
    tags: [ingress, security, tls]
  - name: cnpg
    tags: [database]
  - name: tty
    tags: [tty]
    isShared: true
    ownHost: true
  - name: external-dns
    tags: [ingress, security, tls]
  - name: external-secrets
    tags: [secrets, security]
  - name: gitea
    tags: [git]
    isShared: true
    ownHost: true
    path: /user/oauth2/otomi-idp
    oidcCallbackPath: /user/oauth2/otomi-idp/callback
  - name: grafana
    tags: [tracing, telemetry, observability]
    deps: [prometheus]
    path: /dashboards
    ownHost: true
    oidcCallbackPath: /login/generic_oauth
  - name: harbor
    tags: [security]
    isShared: true
    ownHost: true
    oidcCallbackPath: /c/oidc/callback
  - name: hello
    hide: true
    tags: [demo]
  - name: istio
    tags: [ingress, egress, routing, security, tls, observability, policies]
  - name: keycloak
    path: /admin/otomi/console/
    tags: [auth, sso]
    ownHost: true
  - name: knative
    tags: [serverless, functions]
    deps: [istio]
  - name: kubeflow-pipelines
    tags: [ai, ml]
    ownHost: true
    isShared: true
  - name: kserve
    tags: [ai]
  - name: tekton
    tags: [buildpacks, ci, pipelines]
    ownHost: true
    path: /#/namespaces/team-admin/pipelineruns
  - name: loki
    tags: [logging, telemetry, observability]
    deps: [grafana, prometheus, otel]
    useHost: grafana
    path: /explore?orgId=1&left=%7B"datasource":"loki","queries":%5B%7B"refId":"A"%7D%5D,"range":%7B"from":"now-1h","to":"now"%7D%7D
  - name: console
    hide: true
    isShared: true
    ownHost: true
  - name: api # Used by any client that do not support cookies
    hide: true
    isShared: true
    ownHost: true
  - name: prometheus
    tags: [metrics, observability]
    ownHost: true
  - name: sealed-secrets
    tags: [secrets, security, observability]
  - name: otel
    tags: [logging, tracing]
  - name: trivy
    tags: [security]
    deps: [prometheus, grafana]
  - name: kyverno
    tags: [security]
  - name: rabbitmq
    tags: [messaging]

teamApps:
  - name: alertmanager
    ownHost: true
    path: /#/alerts?silenced=false&inhibited=false&active=true&filter=%7Bnamespace%3D"team-#TEAM#"%7D
  - name: grafana
    ownHost: true
    path: /dashboards
    oidcCallbackPath: /login/generic_oauth
  - name: loki
    useHost: grafana
    path: /explore?orgId=1&left=%7B"datasource":"loki","queries":%5B%7B"refId":"A","expr":"","queryType":"range","datasource":%7B"type":"loki","uid":"loki"%7D%7D%5D,"range":%7B"from":"now-1h","to":"now"%7D%7D
  - name: tekton
    ownHost: true