# Bootstrap app-of-apps leaf: kube-prometheus-stack.
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: noble-kube-prometheus
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io/background
spec:
  project: default
  sources:
    - repoURL: https://prometheus-community.github.io/helm-charts
      chart: kube-prometheus-stack
      targetRevision: 85.0.3
      helm:
        skipCrds: true
        releaseName: kube-prometheus
        valueFiles:
          - $values/clusters/noble/bootstrap/kube-prometheus-stack/values.yaml
          - $values/clusters/noble/bootstrap/kube-prometheus-stack/values-authentik-oidc.yaml
    - repoURL: https://gitea.pcenicni.ca/gsdavidp/home-server.git
      targetRevision: HEAD
      ref: values
  destination:
    server: https://kubernetes.default.svc
    namespace: monitoring
  # Manual sync: Ansible helm runs first; enable automation after cutover (see ../README.md §5).
  # ServerSideApply: avoids oversized **last-applied-configuration** on large chart objects where supported.
  # CRDs: **helm.skipCrds** (Argo must not `--include-crds`). Do not enable chart **crds.upgradeJob** under Argo —
  # its hook ConfigMap exceeds the same annotation limit; CRD bumps via Ansible **helm upgrade** (see values.yaml).
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true