apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: penpot
  namespace: apps
spec:
  interval: 30m
  timeout: 15m
  chart:
    spec:
      chart: penpot
      version: 0.43.0
      sourceRef:
        kind: HelmRepository
        name: penpot
        namespace: infra-gitops
      interval: 12h
  postRenderers:
    - kustomize:
        patches:
          - target:
              kind: Deployment
              name: penpot-backend
            patch: |
              - op: add
                path: /spec/template/spec/containers/0/env/8
                value:
                  name: REDIS_PASSWORD
                  valueFrom:
                    secretKeyRef:
                      name: valkey-cluster-sh
                      key: valkey-password
          - target:
              kind: Deployment
              name: penpot-exporter
            patch: |
              - op: add
                path: /spec/template/spec/containers/0/env/2
                value:
                  name: REDIS_PASSWORD
                  valueFrom:
                    secretKeyRef:
                      name: valkey-cluster-sh
                      key: valkey-password
  values:
    global:
      postgresqlEnabled: false
      valkeyEnabled: false
      redisEnabled: false
    config:
      publicUri: https://penpot.dev.cm
      existingSecret: penpot
      secretKeys:
        apiSecretKey: api-secret-key
      postgresql:
        host: cnpg17-cluster-sh-rw.infra-data
        port: 5432
        database: penpot
        existingSecret: cnpg17-cluster-sh-app
        secretKeys:
          usernameKey: username
          passwordKey: password
      redis:
        host: :$(REDIS_PASSWORD)@valkey-cluster-sh-headless.infra-data
        port: 6379
        database: 0
    backend:
      podAnnotations:
        backup.velero.io/backup-volumes: app-data
    ingress:
      enabled: true
      className: nginx
      hosts:
        - penpot.dev.cm