# Bootstrap Application, applied once by hand (like app-of-projects.yaml
# and incubator/*.yaml) — ArgoCD can't sync its own entry points. Syncs
# everything under secretstores/ so SecretStore/ClusterSecretStore objects
# are GitOps-managed instead of a manual one-off kubectl apply. Mirrors
# app-of-projects.yaml exactly, kept as a separate Application (not folded
# into that one) since these are External Secrets Operator resources, not
# ArgoCD ones — different concern, same pattern.
#
# Uses the built-in "default" project — no chicken-and-egg problem, same
# reasoning as app-of-projects.yaml.
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: app-of-secretstores
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'http://gitea-http.gitea.svc.cluster.local:3000/gitadmin/devops-infra-argo-config-gcp.git'
    targetRevision: main
    path: secretstores
    directory:
      recurse: true
  destination:
    name: in-cluster
    namespace: argocd
  syncPolicy:
    automated:
      prune: true