global:
  domain: argocd.internal.example.com
  affinity: {podAntiAffinity: hard}
  networkPolicy: {create: true, defaultDenyIngress: true}
controller:
  replicas: 2
  pdb: {enabled: true, minAvailable: 1}
  resources:
    requests: {cpu: 500m, memory: 1Gi}
    limits: {cpu: '2', memory: 2Gi}
server:
  replicas: 2
  pdb: {enabled: true, minAvailable: 1}
  resources:
    requests: {cpu: 250m, memory: 256Mi}
    limits: {cpu: '1', memory: 512Mi}
  service: {type: ClusterIP}
repoServer:
  replicas: 2
  pdb: {enabled: true, minAvailable: 1}
  resources:
    requests: {cpu: 500m, memory: 512Mi}
    limits: {cpu: '2', memory: 1Gi}
applicationSet:
  replicas: 2
  pdb: {enabled: true, minAvailable: 1}
  resources:
    requests: {cpu: 250m, memory: 256Mi}
    limits: {cpu: '1', memory: 512Mi}
notifications: {enabled: false}
dex: {enabled: false}
redis: {enabled: false}
redis-ha:
  enabled: true
  replicas: 3
  hardAntiAffinity: true
  splitBrainDetection:
    resources:
      requests: {cpu: 50m, memory: 64Mi}
      limits: {cpu: 250m, memory: 128Mi}
  redis:
    resources:
      requests: {cpu: 100m, memory: 128Mi}
      limits: {cpu: '1', memory: 512Mi}
  sentinel:
    resources:
      requests: {cpu: 100m, memory: 64Mi}
      limits: {cpu: 500m, memory: 128Mi}
  haproxy:
    enabled: true
    replicas: 3
    hardAntiAffinity: true
    resources:
      requests: {cpu: 100m, memory: 128Mi}
      limits: {cpu: 500m, memory: 256Mi}
configs:
  params:
    server.insecure: false
  cm:
    admin.enabled: 'false'
    url: https://argocd.internal.example.com
    oidc.config: |
      name: Corporate
      issuer: https://sso.internal.example.com/realms/platform
      clientID: argocd
      clientSecret: $argocd-oidc:client-secret
      requestedScopes: [openid, profile, email, groups]
  rbac:
    policy.default: role:none
    scopes: '[groups]'
    policy.csv: |
      p, role:platform-admin, *, *, *, allow
      g, platform-admins, role:platform-admin
      g, commerce-deployers, proj:commerce:deployer