Argocd Advanced

# =============================================================================
# Cluster Generator Examples
# =============================================================================
# The Cluster generator automatically discovers clusters registered in ArgoCD
# and generates Applications for each. Uses cluster secrets in argocd namespace.
# =============================================================================

# -----------------------------------------------------------------------------
# Basic Cluster Generator - Deploy to All Clusters
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: cluster-all-example
  namespace: argocd
spec:
  generators:
    - clusters: {}  # Empty selector = all clusters including in-cluster
  template:
    metadata:
      name: '{{name}}-monitoring'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/monitoring.git
        targetRevision: HEAD
        path: base
      destination:
        # Use the 'server' parameter from cluster secret
        server: '{{server}}'
        namespace: monitoring

---
# -----------------------------------------------------------------------------
# Cluster Generator - Label Selector
# -----------------------------------------------------------------------------
# Only target clusters with specific labels (set on cluster secrets)
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: cluster-selector-example
  namespace: argocd
spec:
  generators:
    - clusters:
        selector:
          matchLabels:
            # Only clusters labeled as production
            environment: production
            # With specific cloud provider
            cloud: azure
        # Optional: Additional values to include from cluster secret annotations
        values:
          clusterType: aks
  template:
    metadata:
      name: '{{name}}-security-tools'
      labels:
        cluster: '{{name}}'
        environment: '{{metadata.labels.environment}}'
    spec:
      project: production
      source:
        repoURL: https://github.com/org/security.git
        targetRevision: HEAD
        path: overlays/production
      destination:
        server: '{{server}}'
        namespace: security

---
# -----------------------------------------------------------------------------
# Cluster Generator - Match Expressions
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: cluster-match-expressions-example
  namespace: argocd
spec:
  generators:
    - clusters:
        selector:
          matchExpressions:
            # Clusters in dev OR staging environments
            - key: environment
              operator: In
              values:
                - dev
                - staging
            # Exclude deprecated clusters
            - key: status
              operator: NotIn
              values:
                - deprecated
                - decommissioning
  template:
    metadata:
      name: '{{name}}-feature-flags'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/feature-flags.git
        targetRevision: HEAD
        path: 'clusters/{{metadata.labels.environment}}'
      destination:
        server: '{{server}}'
        namespace: feature-flags

---
# -----------------------------------------------------------------------------
# Cluster Generator - With Values Override
# -----------------------------------------------------------------------------
# Add custom values that can be used in templates
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: cluster-values-example
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - clusters:
        selector:
          matchLabels:
            tier: critical
        # Custom values to add to each cluster's parameters
        values:
          alertChannel: critical-alerts
          retentionDays: "90"
          replicaCount: "3"
  template:
    metadata:
      name: '{{ .name }}-logging'
      annotations:
        alert-channel: '{{ .values.alertChannel }}'
    spec:
      project: infrastructure
      source:
        repoURL: https://github.com/org/logging.git
        targetRevision: HEAD
        path: base
        helm:
          parameters:
            - name: retention.days
              value: '{{ .values.retentionDays }}'
            - name: replicas
              value: '{{ .values.replicaCount }}'
      destination:
        server: '{{ .server }}'
        namespace: logging

---
# -----------------------------------------------------------------------------
# Cluster Generator - Available Parameters
# -----------------------------------------------------------------------------
# Parameters available from cluster secrets:
#
# {{name}}                          - Cluster name (from secret name)
# {{nameNormalized}}                - RFC 1123 compliant name
# {{server}}                        - Cluster API server URL
# {{metadata.labels.<key>}}         - Labels from cluster secret
# {{metadata.annotations.<key>}}    - Annotations from cluster secret
#
# Special cluster name:
# - 'in-cluster' refers to the cluster where ArgoCD is installed
# =============================================================================

# =============================================================================
# Git Generator Examples
# =============================================================================
# Git generators create Applications based on Git repository structure.
# Two types: Directory (folder-based) and File (config file-based)
# =============================================================================

# -----------------------------------------------------------------------------
# Git Directory Generator - Basic Monorepo
# -----------------------------------------------------------------------------
# Creates one Application per directory matching the path pattern
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: git-directory-basic
  namespace: argocd
spec:
  generators:
    - git:
        repoURL: https://github.com/org/monorepo.git
        revision: HEAD
        directories:
          # Include all directories under apps/
          - path: apps/*
  template:
    metadata:
      # {{path}} = full path, {{path.basename}} = directory name only
      name: '{{path.basename}}'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/monorepo.git
        targetRevision: HEAD
        path: '{{path}}'
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{path.basename}}'

---
# -----------------------------------------------------------------------------
# Git Directory Generator - With Excludes
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: git-directory-exclude
  namespace: argocd
spec:
  generators:
    - git:
        repoURL: https://github.com/org/monorepo.git
        revision: HEAD
        directories:
          # Include all under clusters/
          - path: clusters/*
          # Exclude specific directories
          - path: clusters/deprecated
            exclude: true
          - path: clusters/test-*
            exclude: true
  template:
    metadata:
      name: 'cluster-{{path.basename}}'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/monorepo.git
        targetRevision: HEAD
        path: '{{path}}'
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{path.basename}}'

---
# -----------------------------------------------------------------------------
# Git Directory Generator - Nested Paths (Two-Level)
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: git-directory-nested
  namespace: argocd
spec:
  goTemplate: true
  generators:
    - git:
        repoURL: https://github.com/org/monorepo.git
        revision: HEAD
        directories:
          # Match pattern: environments/{env}/apps/{app}
          - path: environments/*/apps/*
  template:
    metadata:
      # path[0]=environments, path[1]=env, path[2]=apps, path[3]=app
      name: '{{ index .path.segments 1 }}-{{ index .path.segments 3 }}'
      labels:
        environment: '{{ index .path.segments 1 }}'
        app: '{{ index .path.segments 3 }}'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/monorepo.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{ index .path.segments 3 }}'

---
# -----------------------------------------------------------------------------
# Git File Generator - JSON Config Files
# -----------------------------------------------------------------------------
# Creates Applications based on config files in the repository
# Supports JSON and YAML files
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: git-file-json
  namespace: argocd
spec:
  generators:
    - git:
        repoURL: https://github.com/org/config-repo.git
        revision: HEAD
        files:
          - path: "apps/**/config.json"
  template:
    metadata:
      name: '{{app.name}}'
      labels:
        team: '{{app.team}}'
        tier: '{{app.tier}}'
    spec:
      project: '{{app.project}}'
      source:
        repoURL: '{{app.source.repoURL}}'
        targetRevision: '{{app.source.targetRevision}}'
        path: '{{app.source.path}}'
      destination:
        server: '{{app.destination.server}}'
        namespace: '{{app.destination.namespace}}'

# Example config.json:
# {
#   "app": {
#     "name": "my-application",
#     "team": "platform",
#     "tier": "critical",
#     "project": "production",
#     "source": {
#       "repoURL": "https://github.com/org/app.git",
#       "targetRevision": "v1.2.0",
#       "path": "deploy/production"
#     },
#     "destination": {
#       "server": "https://prod-cluster:6443",
#       "namespace": "my-app"
#     }
#   }
# }

---
# -----------------------------------------------------------------------------
# Git File Generator - YAML Config Files
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: git-file-yaml
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/org/app-config.git
        revision: HEAD
        files:
          - path: "clusters/*/apps.yaml"
        # Values from files outside the matched path
        values:
          clusterConfigPath: '{{ .path.filenameNormalized }}'
  template:
    metadata:
      name: '{{ .cluster }}-{{ .name }}'
      annotations:
        config-source: '{{ .path.path }}'
    spec:
      project: '{{ .project | default "default" }}'
      source:
        repoURL: '{{ .repoURL }}'
        targetRevision: '{{ .revision | default "HEAD" }}'
        path: '{{ .sourcePath }}'
        helm:
          valueFiles:
            - values.yaml
            - 'values-{{ .cluster }}.yaml'
      destination:
        server: '{{ .server }}'
        namespace: '{{ .namespace }}'

# Example apps.yaml:
# cluster: production-east
# server: https://prod-east.example.com:6443
# apps:
#   - name: frontend
#     repoURL: https://github.com/org/frontend.git
#     sourcePath: deploy
#     namespace: frontend
#   - name: backend
#     repoURL: https://github.com/org/backend.git
#     sourcePath: charts/backend
#     namespace: backend

---
# -----------------------------------------------------------------------------
# Git Generator - Available Parameters
# -----------------------------------------------------------------------------
# Directory Generator Parameters:
#   {{path}}              - Full directory path
#   {{path.path}}         - Same as {{path}} (Go template)
#   {{path.basename}}     - Directory name only
#   {{path.basenameNormalized}} - RFC 1123 compliant basename
#   {{path.segments}}     - Array of path segments (Go template)
#
# File Generator Parameters:
#   All fields from the JSON/YAML file are available
#   {{path.path}}         - Path to the config file
#   {{path.filename}}     - Config filename
#   {{path.filenameNormalized}} - RFC 1123 compliant filename
#   {{path.basenameNormalized}} - Parent directory, normalized
# =============================================================================

# =============================================================================
# List Generator Examples
# =============================================================================
# The List generator generates Applications based on a fixed list of
# cluster/URL values. Most straightforward generator - explicitly define
# what Applications to generate.
# =============================================================================

# -----------------------------------------------------------------------------
# Basic List Generator - Multi-Cluster Deployment
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: list-basic-example
  namespace: argocd
spec:
  generators:
    - list:
        elements:
          # Development cluster
          - cluster: dev
            url: https://kubernetes.default.svc
            environment: development
            region: eastus
          # Staging cluster
          - cluster: staging
            url: https://staging.example.com:6443
            environment: staging
            region: eastus
          # Production cluster
          - cluster: production
            url: https://prod.example.com:6443
            environment: production
            region: westus
  template:
    metadata:
      name: '{{cluster}}-myapp'
      labels:
        environment: '{{environment}}'
        region: '{{region}}'
    spec:
      project: default
      source:
        repoURL: https://github.com/example/app.git
        targetRevision: HEAD
        path: 'environments/{{environment}}'
      destination:
        server: '{{url}}'
        namespace: myapp

---
# -----------------------------------------------------------------------------
# List Generator - Multi-Source with Helm Values
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: list-multi-source-example
  namespace: argocd
spec:
  generators:
    - list:
        elements:
          - cluster: cafehyna-dev
            url: https://aks-cafehyna-dev.privatelink.eastus.azmk8s.io:443
            project: kube-addons
            branch: main
            environment: development
            urlSuffix: dev
          - cluster: cafehyna-prd
            url: https://aks-cafehyna-prd.privatelink.eastus.azmk8s.io:443
            project: kube-addons
            branch: main
            environment: production
            urlSuffix: prd
  template:
    metadata:
      name: '{{cluster}}-app'
      labels:
        environment: '{{environment}}'
      annotations:
        notifications.argoproj.io/subscribe.on-sync-failed.slack: argocd-alerts
    spec:
      project: '{{project}}'
      sources:
        # Helm chart from public repository
        - chart: myapp
          repoURL: https://charts.example.com
          targetRevision: 1.0.0
          helm:
            releaseName: myapp
            valueFiles:
              - $values/helm-values/myapp/{{cluster}}/values.yaml
        # Values repository reference
        - repoURL: https://github.com/org/argocd-values.git
          targetRevision: '{{branch}}'
          ref: values
      destination:
        server: '{{url}}'
        namespace: myapp

---
# -----------------------------------------------------------------------------
# List Generator - Dynamic Element Embedding (elementsYaml)
# -----------------------------------------------------------------------------
# Note: elementsYaml allows referencing elements from ConfigMaps/Secrets
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: list-elements-yaml-example
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - list:
        # Reference elements from a ConfigMap
        elementsYaml: "{{ .clusters | toYaml }}"
        # The ConfigMap 'cluster-config' should have key 'clusters' with YAML array
  template:
    metadata:
      name: '{{ .name }}-app'
    spec:
      project: default
      source:
        repoURL: https://github.com/example/app.git
        targetRevision: HEAD
        path: deploy
      destination:
        server: '{{ .url }}'
        namespace: '{{ .namespace }}'

# =============================================================================
# Matrix and Merge Generator Examples
# =============================================================================
# Matrix: Combines two generators into Cartesian product
# Merge: Combines generators with merge semantics (key-based override)
# =============================================================================

# -----------------------------------------------------------------------------
# Matrix Generator - Clusters x Applications
# -----------------------------------------------------------------------------
# Creates Applications for every combination of cluster and app
# Total apps = clusters * apps (e.g., 3 clusters x 5 apps = 15 Applications)
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: matrix-cluster-apps
  namespace: argocd
spec:
  generators:
    - matrix:
        generators:
          # First generator: Clusters
          - clusters:
              selector:
                matchLabels:
                  environment: production
          # Second generator: Applications from Git
          - git:
              repoURL: https://github.com/org/apps.git
              revision: HEAD
              directories:
                - path: apps/*
  template:
    metadata:
      # Combines cluster name with app name
      name: '{{name}}-{{path.basename}}'
      labels:
        cluster: '{{name}}'
        app: '{{path.basename}}'
    spec:
      project: production
      source:
        repoURL: https://github.com/org/apps.git
        targetRevision: HEAD
        path: '{{path}}'
      destination:
        server: '{{server}}'
        namespace: '{{path.basename}}'

---
# -----------------------------------------------------------------------------
# Matrix Generator - Environments x Services
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: matrix-env-services
  namespace: argocd
spec:
  goTemplate: true
  generators:
    - matrix:
        generators:
          # Environments with their configurations
          - list:
              elements:
                - env: dev
                  cluster: https://dev.example.com:6443
                  replicas: "1"
                - env: staging
                  cluster: https://staging.example.com:6443
                  replicas: "2"
                - env: production
                  cluster: https://prod.example.com:6443
                  replicas: "3"
          # Services to deploy
          - list:
              elements:
                - service: api
                  port: "8080"
                - service: web
                  port: "3000"
                - service: worker
                  port: "9000"
  template:
    metadata:
      name: '{{ .env }}-{{ .service }}'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/services.git
        targetRevision: HEAD
        path: 'services/{{ .service }}'
        helm:
          parameters:
            - name: replicas
              value: '{{ .replicas }}'
            - name: service.port
              value: '{{ .port }}'
      destination:
        server: '{{ .cluster }}'
        namespace: '{{ .service }}'

---
# -----------------------------------------------------------------------------
# Matrix Generator - Nested (Three Levels)
# -----------------------------------------------------------------------------
# Note: Nested matrices allow 3+ dimensions but increase complexity
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: matrix-nested
  namespace: argocd
spec:
  goTemplate: true
  generators:
    - matrix:
        generators:
          # Outer matrix: regions x environments
          - matrix:
              generators:
                - list:
                    elements:
                      - region: us-east
                        regionCode: use
                      - region: us-west
                        regionCode: usw
                - list:
                    elements:
                      - env: dev
                      - env: prod
          # Inner: applications
          - git:
              repoURL: https://github.com/org/apps.git
              revision: HEAD
              directories:
                - path: apps/*
  template:
    metadata:
      name: '{{ .regionCode }}-{{ .env }}-{{ .path.basename }}'
      labels:
        region: '{{ .region }}'
        environment: '{{ .env }}'
        app: '{{ .path.basename }}'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/apps.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
      destination:
        server: 'https://{{ .regionCode }}-{{ .env }}.example.com:6443'
        namespace: '{{ .path.basename }}'

---
# -----------------------------------------------------------------------------
# Merge Generator - Override Defaults
# -----------------------------------------------------------------------------
# Merge combines generators using a key field for matching
# Later generators override earlier ones for matching keys
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: merge-override-example
  namespace: argocd
spec:
  goTemplate: true
  generators:
    - merge:
        # Key field(s) used to match/merge entries
        mergeKeys:
          - cluster
        generators:
          # Base configuration for all clusters
          - clusters:
              selector:
                matchLabels:
                  managed: "true"
              values:
                # Default values for all clusters
                replicas: "2"
                logLevel: info
                memoryLimit: 512Mi
          # Override specific clusters with different values
          - list:
              elements:
                # Production cluster gets higher resources
                - cluster: production
                  values:
                    replicas: "5"
                    logLevel: warn
                    memoryLimit: 2Gi
                # Staging needs debug logging
                - cluster: staging
                  values:
                    logLevel: debug
  template:
    metadata:
      name: '{{ .name }}-app'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/app.git
        targetRevision: HEAD
        path: deploy
        helm:
          parameters:
            - name: replicas
              value: '{{ .values.replicas }}'
            - name: logging.level
              value: '{{ .values.logLevel }}'
            - name: resources.limits.memory
              value: '{{ .values.memoryLimit }}'
      destination:
        server: '{{ .server }}'
        namespace: myapp

---
# -----------------------------------------------------------------------------
# Merge Generator - Multiple Keys
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: merge-multi-key
  namespace: argocd
spec:
  goTemplate: true
  generators:
    - merge:
        mergeKeys:
          - env
          - region
        generators:
          # Global defaults
          - list:
              elements:
                - env: dev
                  region: us
                  replicas: "1"
                  resources: small
                - env: dev
                  region: eu
                  replicas: "1"
                  resources: small
                - env: prod
                  region: us
                  replicas: "3"
                  resources: large
                - env: prod
                  region: eu
                  replicas: "3"
                  resources: large
          # Region-specific overrides
          - list:
              elements:
                # EU production needs more replicas for GDPR compliance
                - env: prod
                  region: eu
                  replicas: "5"
                  resources: xlarge
  template:
    metadata:
      name: '{{ .env }}-{{ .region }}-app'
    spec:
      project: default
      source:
        repoURL: https://github.com/org/app.git
        targetRevision: HEAD
        path: deploy
      destination:
        server: 'https://{{ .env }}-{{ .region }}.example.com:6443'
        namespace: myapp

---
# -----------------------------------------------------------------------------
# Matrix vs Merge - When to Use Each
# -----------------------------------------------------------------------------
#
# USE MATRIX WHEN:
# - You need Cartesian product (all combinations)
# - Every combination should create an Application
# - Example: Deploy all apps to all clusters
#
# USE MERGE WHEN:
# - You have defaults that need selective overrides
# - Not all combinations should exist
# - Example: Base config with environment-specific exceptions
#
# NESTING LIMITS:
# - Matrix can nest other Matrix generators (but avoid deep nesting)
# - Merge cannot contain other Merge generators directly
# - Both can contain any single generator type
# =============================================================================

# =============================================================================
# SCM Provider and Pull Request Generator Examples
# =============================================================================
# SCM Provider: Auto-discover repositories from SCM platforms
# Pull Request: Create preview environments for PRs
# =============================================================================

# -----------------------------------------------------------------------------
# SCM Provider - GitHub Organization
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: scm-github-org
  namespace: argocd
spec:
  generators:
    - scmProvider:
        github:
          organization: my-org
          # Optional: Filter by topics
          # topics: ["argocd", "kubernetes"]
          # Optional: Authentication for private repos
          tokenRef:
            secretName: github-token
            key: token
          # Optional: GitHub Enterprise
          # api: https://github.mycompany.com/api/v3/
          # allBranches: true
        # Filter repositories
        filters:
          # Only repos with specific path
          - pathsExist:
              - deploy/
          # Match repository name pattern
          - repositoryMatch: "^app-.*"
          # Optional: Branch filter
          # - branchMatch: "^main$"
  template:
    metadata:
      name: '{{repository}}'
    spec:
      project: default
      source:
        repoURL: '{{url}}'
        targetRevision: '{{branch}}'
        path: deploy
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{repository}}'

---
# -----------------------------------------------------------------------------
# SCM Provider - GitLab Group
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: scm-gitlab-group
  namespace: argocd
spec:
  generators:
    - scmProvider:
        gitlab:
          group: my-group
          # Include subgroups
          includeSubgroups: true
          # Include shared projects
          includeSharedProjects: false
          # Authentication
          tokenRef:
            secretName: gitlab-token
            key: token
          # Optional: Self-hosted GitLab
          # api: https://gitlab.mycompany.com/
        filters:
          - pathsExist:
              - kubernetes/
          - labelMatch: "deploy=true"
  template:
    metadata:
      name: '{{repository}}'
    spec:
      project: default
      source:
        repoURL: '{{url}}'
        targetRevision: '{{branch}}'
        path: kubernetes
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{repository}}'

---
# -----------------------------------------------------------------------------
# SCM Provider - Azure DevOps
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: scm-azure-devops
  namespace: argocd
spec:
  generators:
    - scmProvider:
        azureDevOps:
          organization: my-org
          # Optional: Specific team project
          teamProject: my-project
          # Authentication (PAT token)
          accessTokenRef:
            secretName: azure-devops-token
            key: token
          # Optional: Azure DevOps Server (on-prem)
          # api: https://dev.azure.com/
        filters:
          - pathsExist:
              - charts/
          - repositoryMatch: "^service-.*"
  template:
    metadata:
      name: '{{repository}}'
      labels:
        organization: '{{organization}}'
    spec:
      project: default
      source:
        repoURL: '{{url}}'
        targetRevision: '{{branch}}'
        path: charts
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{repository}}'

---
# -----------------------------------------------------------------------------
# SCM Provider - Bitbucket Cloud
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: scm-bitbucket
  namespace: argocd
spec:
  generators:
    - scmProvider:
        bitbucket:
          owner: my-workspace
          # Authentication
          appPasswordRef:
            secretName: bitbucket-creds
            key: password
          user: bitbucket-user
        filters:
          - pathsExist:
              - k8s/
  template:
    metadata:
      name: '{{repository}}'
    spec:
      project: default
      source:
        repoURL: '{{url}}'
        targetRevision: '{{branch}}'
        path: k8s
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{repository}}'

---
# -----------------------------------------------------------------------------
# Pull Request Generator - GitHub
# -----------------------------------------------------------------------------
# Creates preview environments for open Pull Requests
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: pr-preview-github
  namespace: argocd
spec:
  generators:
    - pullRequest:
        github:
          owner: my-org
          repo: my-app
          # Authentication for private repos
          tokenRef:
            secretName: github-token
            key: token
          # Optional: Only PRs with specific labels
          labels:
            - preview
            - deploy
          # Optional: GitHub Enterprise
          # api: https://github.mycompany.com/api/v3/
        # How often to check for changes (default 3m)
        requeueAfterSeconds: 180
  template:
    metadata:
      name: 'pr-{{number}}-{{branch_slug}}'
      labels:
        app.kubernetes.io/instance: 'pr-{{number}}'
      annotations:
        # Link back to PR
        github.com/pull-request: '{{head_short_sha}}'
    spec:
      project: preview
      source:
        repoURL: 'https://github.com/my-org/my-app.git'
        # Deploy from the PR branch
        targetRevision: '{{head_sha}}'
        path: deploy
        helm:
          parameters:
            - name: image.tag
              value: 'pr-{{number}}'
            - name: ingress.host
              value: 'pr-{{number}}.preview.example.com'
      destination:
        server: https://kubernetes.default.svc
        namespace: 'preview-pr-{{number}}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pull Request Generator - GitLab
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: pr-preview-gitlab
  namespace: argocd
spec:
  generators:
    - pullRequest:
        gitlab:
          project: my-group/my-project
          # Authentication
          tokenRef:
            secretName: gitlab-token
            key: token
          # Optional: Only MRs with specific labels
          labels:
            - deploy-preview
          # MR state filter (default: opened)
          pullRequestState: opened
        requeueAfterSeconds: 180
  template:
    metadata:
      name: 'mr-{{number}}'
    spec:
      project: preview
      source:
        repoURL: 'https://gitlab.com/my-group/my-project.git'
        targetRevision: '{{head_sha}}'
        path: deploy
      destination:
        server: https://kubernetes.default.svc
        namespace: 'preview-mr-{{number}}'

---
# -----------------------------------------------------------------------------
# Pull Request Generator - Azure DevOps
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: pr-preview-azure
  namespace: argocd
spec:
  generators:
    - pullRequest:
        azuredevops:
          organization: my-org
          project: my-project
          repo: my-repo
          # Authentication
          tokenRef:
            secretName: azure-devops-token
            key: token
          # Optional: Filter by labels
          labels:
            - deploy
  template:
    metadata:
      name: 'pr-{{number}}'
    spec:
      project: preview
      source:
        repoURL: 'https://dev.azure.com/my-org/my-project/_git/my-repo'
        targetRevision: '{{head_sha}}'
        path: deploy
      destination:
        server: https://kubernetes.default.svc
        namespace: 'preview-pr-{{number}}'

---
# -----------------------------------------------------------------------------
# Available Parameters
# -----------------------------------------------------------------------------
# SCM Provider Parameters:
#   {{organization}}     - SCM organization/group name
#   {{repository}}       - Repository name
#   {{url}}              - Repository clone URL
#   {{branch}}           - Default branch name
#   {{sha}}              - Latest commit SHA
#   {{short_sha}}        - Short commit SHA (first 7 chars)
#   {{labels}}           - Repository labels/topics
#
# Pull Request Parameters:
#   {{number}}           - PR/MR number
#   {{branch}}           - Source branch name
#   {{branch_slug}}      - URL-safe branch name
#   {{target_branch}}    - Target/base branch
#   {{target_branch_slug}} - URL-safe target branch
#   {{head_sha}}         - Full commit SHA
#   {{head_short_sha}}   - Short commit SHA
#   {{head_short_sha_7}} - 7-char commit SHA
#   {{labels}}           - PR labels (array)
# =============================================================================

# =============================================================================
# App-of-Apps Pattern with ApplicationSets
# =============================================================================
# Bootstrap entire environments or clusters with a single ApplicationSet.
# Creates hierarchical application management with parent-child relationships.
# =============================================================================

# -----------------------------------------------------------------------------
# Pattern 1: Root ApplicationSet (Bootstrap)
# -----------------------------------------------------------------------------
# Single ApplicationSet that bootstraps all cluster components
#
# Repository structure:
#   bootstrap/
#   ├── argocd/                    # ArgoCD itself
#   ├── infrastructure/
#   │   └── applicationset.yaml    # Creates infra apps
#   └── applications/
#       └── applicationset.yaml    # Creates business apps
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: cluster-bootstrap
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/org/gitops-bootstrap.git
        revision: HEAD
        directories:
          - path: bootstrap/*
  template:
    metadata:
      name: 'bootstrap-{{ .path.basename }}'
      labels:
        app.kubernetes.io/part-of: cluster-bootstrap
        layer: bootstrap
    spec:
      project: bootstrap
      source:
        repoURL: https://github.com/org/gitops-bootstrap.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
      destination:
        server: https://kubernetes.default.svc
        namespace: argocd
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 2: Infrastructure Layer ApplicationSet
# -----------------------------------------------------------------------------
# Manages infrastructure components (cert-manager, ingress, monitoring, etc.)
#
# Repository structure:
#   infrastructure/
#   ├── cert-manager/
#   │   └── config.yaml
#   ├── external-dns/
#   │   └── config.yaml
#   ├── ingress-nginx/
#   │   └── config.yaml
#   └── monitoring/
#       └── config.yaml
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: infrastructure
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/org/infrastructure.git
        revision: HEAD
        files:
          - path: "*/config.yaml"
  template:
    metadata:
      name: 'infra-{{ .name }}'
      labels:
        app.kubernetes.io/part-of: infrastructure
        layer: infrastructure
        component: '{{ .name }}'
      annotations:
        # Sync wave for ordering
        argocd.argoproj.io/sync-wave: '{{ .syncWave | default "0" }}'
    spec:
      project: infrastructure
      source:
        chart: '{{ .chart }}'
        repoURL: '{{ .repoURL }}'
        targetRevision: '{{ .version }}'
        helm:
          releaseName: '{{ .name }}'
          values: |
            {{ .values | toYaml | nindent 12 }}
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{ .namespace }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true
          - ServerSideApply=true

---
# Example config.yaml for cert-manager:
# name: cert-manager
# chart: cert-manager
# repoURL: https://charts.jetstack.io
# version: "1.13.0"
# namespace: cert-manager
# syncWave: "-2"
# values:
#   installCRDs: true
#   prometheus:
#     enabled: true

---
# -----------------------------------------------------------------------------
# Pattern 3: Application Layer with Dependencies
# -----------------------------------------------------------------------------
# Applications that depend on infrastructure components
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: applications
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/org/applications.git
        revision: HEAD
        files:
          - path: "apps/*/app.yaml"
  template:
    metadata:
      name: '{{ .name }}'
      labels:
        app.kubernetes.io/name: '{{ .name }}'
        app.kubernetes.io/part-of: applications
        layer: application
        team: '{{ .team }}'
      annotations:
        # Applications sync after infrastructure
        argocd.argoproj.io/sync-wave: '{{ .syncWave | default "10" }}'
        notifications.argoproj.io/subscribe.on-sync-failed.slack: '{{ .team }}-alerts'
      finalizers:
        - resources-finalizer.argocd.argoproj.io
    spec:
      project: '{{ .project | default "default" }}'
      sources:
        - chart: '{{ .chart }}'
          repoURL: '{{ .chartRepo }}'
          targetRevision: '{{ .chartVersion }}'
          helm:
            releaseName: '{{ .name }}'
            valueFiles:
              - $values/{{ .name }}/values.yaml
        - repoURL: https://github.com/org/helm-values.git
          targetRevision: main
          ref: values
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{ .namespace }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 4: Multi-Cluster App-of-Apps
# -----------------------------------------------------------------------------
# Bootstrap multiple clusters from a single ApplicationSet
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: multi-cluster-bootstrap
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - matrix:
        generators:
          # Target clusters
          - clusters:
              selector:
                matchLabels:
                  bootstrap: enabled
          # Components to deploy
          - git:
              repoURL: https://github.com/org/cluster-bootstrap.git
              revision: HEAD
              directories:
                - path: components/*
  template:
    metadata:
      name: '{{ .name }}-{{ .path.basename }}'
      labels:
        cluster: '{{ .name }}'
        component: '{{ .path.basename }}'
    spec:
      project: cluster-bootstrap
      source:
        repoURL: https://github.com/org/cluster-bootstrap.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
        helm:
          parameters:
            - name: cluster.name
              value: '{{ .name }}'
            - name: cluster.server
              value: '{{ .server }}'
      destination:
        server: '{{ .server }}'
        namespace: '{{ .path.basename }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 5: Progressive Sync App-of-Apps
# -----------------------------------------------------------------------------
# Roll out applications progressively with RollingSync
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: progressive-rollout
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - clusters:
        selector:
          matchLabels:
            environment: production
        # Add rollout metadata
        values:
          rolloutGroup: production
  # Progressive sync strategy
  strategy:
    type: RollingSync
    rollingSync:
      steps:
        # Step 1: Canary cluster (10% traffic)
        - matchExpressions:
            - key: tier
              operator: In
              values:
                - canary
          maxUpdate: 1
        # Step 2: Non-critical clusters
        - matchExpressions:
            - key: tier
              operator: In
              values:
                - standard
          maxUpdate: 2
        # Step 3: Critical clusters (one at a time)
        - matchExpressions:
            - key: tier
              operator: In
              values:
                - critical
          maxUpdate: 1
  template:
    metadata:
      name: '{{ .name }}-platform'
    spec:
      project: production
      source:
        repoURL: https://github.com/org/platform.git
        targetRevision: HEAD
        path: platform
      destination:
        server: '{{ .server }}'
        namespace: platform

---
# -----------------------------------------------------------------------------
# Pattern 6: Environment-Based Hierarchy
# -----------------------------------------------------------------------------
# Structure: Root -> Environment -> Applications
#
# ApplicationSet hierarchy:
#   root-bootstrap
#     └── env-applicationsets (dev, staging, prod)
#           └── app-applicationsets (per environment)
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: environment-bootstrap
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - list:
        elements:
          - env: dev
            cluster: https://dev.example.com:6443
            autoSync: "true"
            project: development
          - env: staging
            cluster: https://staging.example.com:6443
            autoSync: "true"
            project: staging
          - env: production
            cluster: https://prod.example.com:6443
            autoSync: "false"  # Manual sync for production
            project: production
  template:
    metadata:
      name: '{{ .env }}-apps'
      labels:
        environment: '{{ .env }}'
        layer: environment
    spec:
      project: '{{ .project }}'
      source:
        repoURL: https://github.com/org/gitops.git
        targetRevision: HEAD
        path: 'environments/{{ .env }}'
      destination:
        server: '{{ .cluster }}'
        namespace: argocd
      # Conditional sync policy
      {{ if eq .autoSync "true" }}
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
      {{ end }}

---
# -----------------------------------------------------------------------------
# Supporting: AppProject for Bootstrap
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: bootstrap
  namespace: argocd
spec:
  description: Bootstrap project for cluster initialization
  sourceRepos:
    - https://github.com/org/*
  destinations:
    - namespace: '*'
      server: '*'
  # Allow creating other ApplicationSets
  clusterResourceWhitelist:
    - group: 'argoproj.io'
      kind: ApplicationSet
    - group: 'argoproj.io'
      kind: Application
    - group: 'argoproj.io'
      kind: AppProject
    - group: ''
      kind: Namespace

---
# -----------------------------------------------------------------------------
# Best Practices for App-of-Apps
# -----------------------------------------------------------------------------
# 1. Layer Organization:
#    Layer 0: Bootstrap (ArgoCD itself, base CRDs)
#    Layer 1: Infrastructure (cert-manager, ingress, monitoring)
#    Layer 2: Platform (databases, message queues, caches)
#    Layer 3: Applications (business applications)
#
# 2. Sync Wave Ordering:
#    -3: CRDs and cluster-wide resources
#    -2: Certificate managers, secrets operators
#    -1: Ingress controllers, DNS operators
#     0: Default (most applications)
#    10: Applications dependent on infrastructure
#
# 3. Dependency Management:
#    - Use sync-waves to order deployments
#    - Consider using sync hooks for critical dependencies
#    - Use health checks to verify readiness
#
# 4. Project Isolation:
#    - Separate projects per layer/environment
#    - Limit cluster resources per project
#    - Use RBAC to control access
#
# 5. Repository Structure:
#    gitops-repo/
#    ├── bootstrap/
#    │   ├── argocd/
#    │   └── root-applicationsets/
#    ├── infrastructure/
#    │   ├── cert-manager/
#    │   └── ingress-nginx/
#    ├── platform/
#    │   ├── postgresql/
#    │   └── redis/
#    └── applications/
#        ├── api-gateway/
#        └── user-service/
# =============================================================================

# =============================================================================
# Monorepo Deployment Pattern
# =============================================================================
# Manage multiple applications from a single repository using Git generators.
# Supports automatic discovery based on directory structure.
# =============================================================================

# -----------------------------------------------------------------------------
# Pattern 1: Simple Directory Discovery
# -----------------------------------------------------------------------------
# Automatically create Applications for each app directory
#
# Repository structure:
#   apps/
#   ├── api-gateway/
#   │   ├── kustomization.yaml
#   │   └── ...
#   ├── user-service/
#   │   └── kustomization.yaml
#   └── order-service/
#       └── kustomization.yaml
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: monorepo-apps-discovery
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/org/monorepo.git
        revision: HEAD
        directories:
          - path: apps/*
          # Exclude specific directories
          - path: apps/deprecated-*
            exclude: true
  template:
    metadata:
      name: '{{ .path.basename }}'
      labels:
        app.kubernetes.io/name: '{{ .path.basename }}'
        app.kubernetes.io/part-of: monorepo
    spec:
      project: default
      source:
        repoURL: https://github.com/org/monorepo.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{ .path.basename }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 2: Environment Overlays with Kustomize
# -----------------------------------------------------------------------------
# Repository structure:
#   services/
#   ├── api-gateway/
#   │   ├── base/
#   │   │   └── kustomization.yaml
#   │   └── overlays/
#   │       ├── dev/
#   │       │   └── kustomization.yaml
#   │       ├── staging/
#   │       │   └── kustomization.yaml
#   │       └── production/
#   │       │   └── kustomization.yaml
#   └── user-service/
#       ├── base/
#       └── overlays/
#           ├── dev/
#           ├── staging/
#           └── production/
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: monorepo-kustomize-overlays
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/org/monorepo.git
        revision: HEAD
        directories:
          # Match: services/{service}/overlays/{env}
          - path: services/*/overlays/*
  template:
    metadata:
      # segments: [0]=services, [1]=service-name, [2]=overlays, [3]=env
      name: '{{ index .path.segments 3 }}-{{ index .path.segments 1 }}'
      labels:
        service: '{{ index .path.segments 1 }}'
        environment: '{{ index .path.segments 3 }}'
    spec:
      project: '{{ index .path.segments 3 }}'
      source:
        repoURL: https://github.com/org/monorepo.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{ index .path.segments 1 }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true

---
# -----------------------------------------------------------------------------
# Pattern 3: Config File Discovery (JSON/YAML)
# -----------------------------------------------------------------------------
# Repository structure:
#   apps/
#   ├── api-gateway/
#   │   └── config.yaml
#   ├── user-service/
#   │   └── config.yaml
#   └── order-service/
#       └── config.yaml
#
# config.yaml format:
#   name: api-gateway
#   team: platform
#   namespace: gateway
#   chart: nginx-ingress
#   repoURL: https://kubernetes.github.io/ingress-nginx
#   version: "4.8.0"
#   values:
#     controller:
#       replicaCount: 3
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: monorepo-config-files
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/org/monorepo.git
        revision: HEAD
        files:
          - path: apps/*/config.yaml
  template:
    metadata:
      name: '{{ .name }}'
      labels:
        app.kubernetes.io/name: '{{ .name }}'
        team: '{{ .team }}'
      annotations:
        notifications.argoproj.io/subscribe.on-sync-failed.slack: '{{ .team }}-alerts'
    spec:
      project: default
      source:
        chart: '{{ .chart }}'
        repoURL: '{{ .repoURL }}'
        targetRevision: '{{ .version }}'
        helm:
          releaseName: '{{ .name }}'
          values: |
            {{ .values | toYaml | nindent 12 }}
      destination:
        server: https://kubernetes.default.svc
        namespace: '{{ .namespace }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 4: Matrix - Apps x Environments
# -----------------------------------------------------------------------------
# Deploy all apps to all environments
#
# Repository structure:
#   apps/
#   │   └── */deploy/              # App definitions
#   environments/
#   │   └── */config.yaml          # Environment configs
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: monorepo-apps-envs-matrix
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - matrix:
        generators:
          # Applications
          - git:
              repoURL: https://github.com/org/monorepo.git
              revision: HEAD
              directories:
                - path: apps/*/deploy
          # Environments (from config files)
          - git:
              repoURL: https://github.com/org/monorepo.git
              revision: HEAD
              files:
                - path: environments/*/config.yaml
  template:
    metadata:
      # path.segments from first generator, env from second
      name: '{{ .env }}-{{ index .path.segments 1 }}'
      labels:
        app: '{{ index .path.segments 1 }}'
        environment: '{{ .env }}'
    spec:
      project: '{{ .env }}'
      source:
        repoURL: https://github.com/org/monorepo.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
        kustomize:
          # Apply environment-specific patches
          patches:
            - target:
                kind: Deployment
              patch: |
                - op: replace
                  path: /spec/replicas
                  value: {{ .replicas }}
      destination:
        server: '{{ .clusterUrl }}'
        namespace: '{{ index .path.segments 1 }}'

---
# -----------------------------------------------------------------------------
# Pattern 5: Helm Charts in Monorepo
# -----------------------------------------------------------------------------
# Repository structure:
#   charts/
#   ├── api-gateway/
#   │   ├── Chart.yaml
#   │   ├── values.yaml
#   │   └── templates/
#   ├── user-service/
#   │   ├── Chart.yaml
#   │   ├── values.yaml
#   │   └── templates/
#   values/
#   ├── dev/
#   │   ├── api-gateway.yaml
#   │   └── user-service.yaml
#   └── prd/
#       ├── api-gateway.yaml
#       └── user-service.yaml
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: monorepo-helm-charts
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - matrix:
        generators:
          # Discover Helm charts
          - git:
              repoURL: https://github.com/org/monorepo.git
              revision: HEAD
              directories:
                - path: charts/*
          # Environments
          - list:
              elements:
                - env: dev
                  cluster: https://dev.example.com:6443
                - env: prd
                  cluster: https://prd.example.com:6443
  template:
    metadata:
      name: '{{ .env }}-{{ .path.basename }}'
    spec:
      project: '{{ .env }}'
      source:
        repoURL: https://github.com/org/monorepo.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
        helm:
          releaseName: '{{ .path.basename }}'
          valueFiles:
            # Chart default values + environment override
            - values.yaml
            - ../../values/{{ .env }}/{{ .path.basename }}.yaml
      destination:
        server: '{{ .cluster }}'
        namespace: '{{ .path.basename }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 6: Nested Directories (Deep Monorepo)
# -----------------------------------------------------------------------------
# Repository structure:
#   platform/
#   ├── us-east/
#   │   ├── dev/
#   │   │   ├── api-gateway/
#   │   │   └── user-service/
#   │   └── prd/
#   │       ├── api-gateway/
#   │       └── user-service/
#   └── eu-west/
#       ├── dev/
#       └── prd/
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: monorepo-nested-directories
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/org/monorepo.git
        revision: HEAD
        directories:
          # Match: platform/{region}/{env}/{app}
          - path: platform/*/*/**
  template:
    metadata:
      # segments: [0]=platform, [1]=region, [2]=env, [3]=app
      name: '{{ index .path.segments 1 }}-{{ index .path.segments 2 }}-{{ index .path.segments 3 }}'
      labels:
        region: '{{ index .path.segments 1 }}'
        environment: '{{ index .path.segments 2 }}'
        app: '{{ index .path.segments 3 }}'
    spec:
      project: '{{ index .path.segments 2 }}'
      source:
        repoURL: https://github.com/org/monorepo.git
        targetRevision: HEAD
        path: '{{ .path.path }}'
      destination:
        server: 'https://{{ index .path.segments 1 }}-{{ index .path.segments 2 }}.example.com:6443'
        namespace: '{{ index .path.segments 3 }}'

---
# -----------------------------------------------------------------------------
# Best Practices for Monorepo Pattern
# -----------------------------------------------------------------------------
# 1. Directory Structure Conventions:
#    - Use consistent naming (kebab-case)
#    - Separate apps from shared configs
#    - Group by logical boundaries (team, domain, environment)
#
# 2. Use .argocd-allow-deny for control:
#    .argocd-allow-deny:
#      allow:
#        - path/to/allowed/*
#      deny:
#        - path/to/denied/*
#
# 3. Path Segments for naming:
#    - index .path.segments N - Access specific directory level
#    - .path.basename - Last directory name
#    - .path.path - Full path
#    - .path.filenameNormalized - Filename without extension
#
# 4. Exclude patterns for flexibility:
#    directories:
#      - path: apps/*
#      - path: apps/legacy-*
#        exclude: true
#
# 5. Config file validation:
#    - Use JSON Schema to validate config.yaml files
#    - Add pre-commit hooks to catch errors early
# =============================================================================

# =============================================================================
# Multi-Cluster Deployment Pattern
# =============================================================================
# Deploy applications across multiple Kubernetes clusters with environment-
# specific configurations. Uses Cluster generator with label selectors.
# =============================================================================

# -----------------------------------------------------------------------------
# Pattern 1: Environment-Based Multi-Cluster
# -----------------------------------------------------------------------------
# Deploy same app to dev/staging/production clusters
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: multi-cluster-by-environment
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - clusters:
        selector:
          matchLabels:
            argocd.argoproj.io/secret-type: cluster
        # Add custom values per cluster via labels
        values:
          helmValuesRepo: https://github.com/org/helm-values.git
  template:
    metadata:
      name: '{{ .name }}-nginx'
      labels:
        app.kubernetes.io/name: nginx
        cluster: '{{ .name }}'
        environment: '{{ index .metadata.labels "environment" }}'
      finalizers:
        - resources-finalizer.argocd.argoproj.io
    spec:
      project: '{{ index .metadata.labels "environment" | default "default" }}'
      sources:
        # Helm chart from public repo
        - chart: nginx
          repoURL: https://charts.bitnami.com/bitnami
          targetRevision: 15.0.0
          helm:
            releaseName: nginx
            valueFiles:
              # Base values
              - $values/nginx/base/values.yaml
              # Environment-specific values
              - $values/nginx/{{ index .metadata.labels "environment" }}/values.yaml
              # Cluster-specific values
              - $values/nginx/clusters/{{ .name }}/values.yaml
        # Values repository
        - repoURL: '{{ .values.helmValuesRepo }}'
          targetRevision: main
          ref: values
      destination:
        server: '{{ .server }}'
        namespace: nginx
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true
          - ServerSideApply=true

---
# -----------------------------------------------------------------------------
# Pattern 2: Regional Multi-Cluster with Matrix
# -----------------------------------------------------------------------------
# Deploy apps to clusters organized by region and environment
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: regional-multi-cluster
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - matrix:
        generators:
          # Clusters by region
          - clusters:
              selector:
                matchExpressions:
                  - key: region
                    operator: In
                    values:
                      - us-east
                      - us-west
                      - eu-west
          # Applications to deploy
          - list:
              elements:
                - app: api-gateway
                  namespace: gateway
                  chart: kong
                  repoURL: https://charts.konghq.com
                  version: "2.26.0"
                - app: cert-manager
                  namespace: cert-manager
                  chart: cert-manager
                  repoURL: https://charts.jetstack.io
                  version: "1.13.0"
  template:
    metadata:
      name: '{{ .name }}-{{ .app }}'
      labels:
        cluster: '{{ .name }}'
        region: '{{ index .metadata.labels "region" }}'
        app: '{{ .app }}'
    spec:
      project: infrastructure
      source:
        chart: '{{ .chart }}'
        repoURL: '{{ .repoURL }}'
        targetRevision: '{{ .version }}'
        helm:
          releaseName: '{{ .app }}'
      destination:
        server: '{{ .server }}'
        namespace: '{{ .namespace }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 3: Cluster Groups with Merge Override
# -----------------------------------------------------------------------------
# Base config for all clusters with overrides for specific groups
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: cluster-groups-merge
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - merge:
        mergeKeys:
          - name
        generators:
          # Base configuration for all production clusters
          - clusters:
              selector:
                matchLabels:
                  environment: production
              values:
                replicas: "3"
                resources: standard
                monitoring: enabled
                logLevel: info
          # Override for high-traffic clusters
          - clusters:
              selector:
                matchLabels:
                  environment: production
                  tier: high-traffic
              values:
                replicas: "10"
                resources: large
                autoscaling: enabled
          # Override for compliance clusters (PCI, HIPAA, etc.)
          - clusters:
              selector:
                matchLabels:
                  environment: production
                  compliance: required
              values:
                logLevel: debug
                auditLogging: enabled
                encryptionAtRest: enabled
  template:
    metadata:
      name: '{{ .name }}-workload'
      annotations:
        replicas: '{{ .values.replicas }}'
        monitoring: '{{ .values.monitoring }}'
    spec:
      project: production
      source:
        repoURL: https://github.com/org/workloads.git
        targetRevision: HEAD
        path: workload
        helm:
          parameters:
            - name: replicas
              value: '{{ .values.replicas }}'
            - name: resources.preset
              value: '{{ .values.resources }}'
            - name: logging.level
              value: '{{ .values.logLevel }}'
      destination:
        server: '{{ .server }}'
        namespace: workload

---
# -----------------------------------------------------------------------------
# Cluster Registration (Secret Format)
# -----------------------------------------------------------------------------
# Clusters must be registered as Secrets in ArgoCD namespace
# =============================================================================
apiVersion: v1
kind: Secret
metadata:
  name: cluster-cafehyna-dev
  namespace: argocd
  labels:
    # Required label for cluster discovery
    argocd.argoproj.io/secret-type: cluster
    # Custom labels for selection
    environment: development
    region: us-east
    tier: standard
    team: platform
type: Opaque
stringData:
  name: cafehyna-dev
  server: https://aks-dev.privatelink.eastus.azmk8s.io:443
  # For clusters with bearer token auth
  config: |
    {
      "bearerToken": "<token>",
      "tlsClientConfig": {
        "insecure": false,
        "caData": "<base64-ca-cert>"
      }
    }

---
# Production cluster with compliance labels
apiVersion: v1
kind: Secret
metadata:
  name: cluster-cafehyna-prd
  namespace: argocd
  labels:
    argocd.argoproj.io/secret-type: cluster
    environment: production
    region: us-east
    tier: high-traffic
    compliance: required
    team: platform
type: Opaque
stringData:
  name: cafehyna-prd
  server: https://aks-prd.privatelink.eastus.azmk8s.io:443
  config: |
    {
      "bearerToken": "<token>",
      "tlsClientConfig": {
        "insecure": false,
        "caData": "<base64-ca-cert>"
      }
    }

---
# -----------------------------------------------------------------------------
# Best Practices for Multi-Cluster
# -----------------------------------------------------------------------------
# 1. Use meaningful cluster labels:
#    - environment: dev/staging/production
#    - region: us-east/us-west/eu-west
#    - tier: standard/high-traffic/critical
#    - compliance: pci/hipaa/sox (if applicable)
#    - team: platform/application/security
#
# 2. Organize values files hierarchically:
#    helm-values/
#    ├── base/
#    │   └── values.yaml           # Shared across all
#    ├── dev/
#    │   └── values.yaml           # Dev environment
#    ├── staging/
#    │   └── values.yaml           # Staging environment
#    ├── production/
#    │   └── values.yaml           # Production environment
#    └── clusters/
#        ├── cafehyna-dev/
#        │   └── values.yaml       # Cluster-specific
#        └── cafehyna-prd/
#            └── values.yaml       # Cluster-specific
#
# 3. Use projects for access control:
#    - Different projects per environment
#    - Restrict which clusters each project can deploy to
#
# 4. Progressive rollout:
#    - Deploy to dev first, then staging, then production
#    - Use Progressive Syncs (rollingSync) for safer deployments
# =============================================================================

# =============================================================================
# Pull Request Preview Environment Pattern
# =============================================================================
# Automatically create preview/ephemeral environments for Pull Requests.
# Supports GitHub, GitLab, Azure DevOps, and Bitbucket.
# =============================================================================

# -----------------------------------------------------------------------------
# Pattern 1: GitHub PR Preview
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: github-pr-preview
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - pullRequest:
        github:
          owner: my-org
          repo: my-app
          # Only PRs with these labels get preview environments
          labels:
            - preview
            - deploy
          # Authentication for private repos
          tokenRef:
            secretName: github-token
            key: token
          # GitHub Enterprise (optional)
          # api: https://github.mycompany.com/api/v3/
        # Check for new/closed PRs every 3 minutes
        requeueAfterSeconds: 180
  template:
    metadata:
      name: 'pr-{{ .number }}-{{ .branch_slug }}'
      labels:
        app.kubernetes.io/name: my-app
        app.kubernetes.io/instance: 'pr-{{ .number }}'
        preview: "true"
      annotations:
        # Link back to PR for easy navigation
        github.com/pull-request-number: '{{ .number }}'
        github.com/pull-request-sha: '{{ .head_sha }}'
        github.com/pull-request-branch: '{{ .branch }}'
      # Auto-cleanup when PR is closed
      finalizers:
        - resources-finalizer.argocd.argoproj.io
    spec:
      project: preview
      source:
        repoURL: https://github.com/my-org/my-app.git
        # Deploy from the PR branch head
        targetRevision: '{{ .head_sha }}'
        path: deploy
        helm:
          releaseName: 'pr-{{ .number }}'
          parameters:
            # Dynamic image tag for PR
            - name: image.tag
              value: 'pr-{{ .number }}'
            # Unique ingress hostname
            - name: ingress.enabled
              value: "true"
            - name: ingress.hostname
              value: 'pr-{{ .number }}.preview.example.com'
            # Reduced resources for previews
            - name: replicaCount
              value: "1"
            - name: resources.requests.memory
              value: "256Mi"
            - name: resources.requests.cpu
              value: "100m"
          values: |
            # Preview-specific config
            env:
              ENVIRONMENT: preview
              PR_NUMBER: "{{ .number }}"
              BRANCH: "{{ .branch }}"
      destination:
        server: https://kubernetes.default.svc
        namespace: 'preview-pr-{{ .number }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true
          - PruneLast=true
        # Managed namespace with labels
        managedNamespaceMetadata:
          labels:
            preview: "true"
            pr-number: '{{ .number }}'

---
# -----------------------------------------------------------------------------
# Pattern 2: GitLab MR Preview
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: gitlab-mr-preview
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - pullRequest:
        gitlab:
          project: my-group/my-project
          # Only open MRs
          pullRequestState: opened
          # Only MRs with these labels
          labels:
            - deploy-preview
          tokenRef:
            secretName: gitlab-token
            key: token
          # Self-hosted GitLab (optional)
          # api: https://gitlab.mycompany.com/
        requeueAfterSeconds: 180
  template:
    metadata:
      name: 'mr-{{ .number }}'
      labels:
        app.kubernetes.io/instance: 'mr-{{ .number }}'
      finalizers:
        - resources-finalizer.argocd.argoproj.io
    spec:
      project: preview
      source:
        repoURL: https://gitlab.com/my-group/my-project.git
        targetRevision: '{{ .head_sha }}'
        path: kubernetes
        kustomize:
          nameSuffix: '-pr{{ .number }}'
          images:
            - 'my-app=registry.gitlab.com/my-group/my-project:{{ .head_short_sha }}'
      destination:
        server: https://kubernetes.default.svc
        namespace: 'preview-mr-{{ .number }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 3: Azure DevOps PR Preview
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: azure-devops-pr-preview
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - pullRequest:
        azuredevops:
          organization: my-org
          project: my-project
          repo: my-repo
          labels:
            - preview
          tokenRef:
            secretName: azure-devops-token
            key: token
        requeueAfterSeconds: 180
  template:
    metadata:
      name: 'pr-{{ .number }}'
      finalizers:
        - resources-finalizer.argocd.argoproj.io
    spec:
      project: preview
      source:
        repoURL: https://dev.azure.com/my-org/my-project/_git/my-repo
        targetRevision: '{{ .head_sha }}'
        path: deploy
      destination:
        server: https://kubernetes.default.svc
        namespace: 'preview-pr-{{ .number }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 4: Full-Stack Preview (Multiple Services)
# -----------------------------------------------------------------------------
# Deploy multiple services for each PR using Matrix
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: fullstack-pr-preview
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - matrix:
        generators:
          # PRs
          - pullRequest:
              github:
                owner: my-org
                repo: my-fullstack-app
                labels:
                  - preview
                tokenRef:
                  secretName: github-token
                  key: token
          # Services to deploy per PR
          - list:
              elements:
                - service: frontend
                  path: services/frontend
                  port: "3000"
                - service: backend
                  path: services/backend
                  port: "8080"
                - service: database
                  path: services/database
                  port: "5432"
  template:
    metadata:
      name: 'pr-{{ .number }}-{{ .service }}'
      labels:
        pr-number: '{{ .number }}'
        service: '{{ .service }}'
      finalizers:
        - resources-finalizer.argocd.argoproj.io
    spec:
      project: preview
      source:
        repoURL: https://github.com/my-org/my-fullstack-app.git
        targetRevision: '{{ .head_sha }}'
        path: '{{ .path }}'
        helm:
          parameters:
            - name: image.tag
              value: 'pr-{{ .number }}'
            # Service discovery within the preview namespace
            - name: service.port
              value: '{{ .port }}'
      destination:
        server: https://kubernetes.default.svc
        # All services share the same namespace
        namespace: 'preview-pr-{{ .number }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Pattern 5: Preview with External Database
# -----------------------------------------------------------------------------
# Connect PR previews to shared preview database
# =============================================================================
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: pr-preview-with-db
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - pullRequest:
        github:
          owner: my-org
          repo: my-app
          labels:
            - preview
          tokenRef:
            secretName: github-token
            key: token
  template:
    metadata:
      name: 'pr-{{ .number }}'
      finalizers:
        - resources-finalizer.argocd.argoproj.io
    spec:
      project: preview
      sources:
        # Application
        - repoURL: https://github.com/my-org/my-app.git
          targetRevision: '{{ .head_sha }}'
          path: deploy
          helm:
            releaseName: 'pr-{{ .number }}'
            valueFiles:
              - $values/preview-values.yaml
            parameters:
              - name: image.tag
                value: 'pr-{{ .number }}'
              # Use PR-specific database schema
              - name: database.schema
                value: 'pr_{{ .number }}'
              - name: database.host
                value: preview-db.example.com
        # Shared preview values
        - repoURL: https://github.com/my-org/helm-values.git
          targetRevision: main
          ref: values
      destination:
        server: https://kubernetes.default.svc
        namespace: 'preview-pr-{{ .number }}'
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true

---
# -----------------------------------------------------------------------------
# Supporting Resources: ArgoCD Project for Previews
# -----------------------------------------------------------------------------
apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: preview
  namespace: argocd
spec:
  description: Preview environments for Pull Requests
  sourceRepos:
    - https://github.com/my-org/*
  destinations:
    # Only allow preview namespaces
    - namespace: 'preview-*'
      server: https://kubernetes.default.svc
  # Limited cluster resources for previews
  clusterResourceWhitelist: []
  namespaceResourceWhitelist:
    - group: ''
      kind: '*'
    - group: 'apps'
      kind: '*'
    - group: 'networking.k8s.io'
      kind: '*'
  # Orphaned resource monitoring
  orphanedResources:
    warn: true

---
# -----------------------------------------------------------------------------
# GitHub Token Secret
# -----------------------------------------------------------------------------
apiVersion: v1
kind: Secret
metadata:
  name: github-token
  namespace: argocd
type: Opaque
stringData:
  token: ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

---
# -----------------------------------------------------------------------------
# Available PR Parameters Reference
# -----------------------------------------------------------------------------
# {{number}}           - PR/MR number
# {{branch}}           - Source branch name
# {{branch_slug}}      - URL-safe branch name (lowercase, dashes)
# {{target_branch}}    - Target/base branch (e.g., main)
# {{target_branch_slug}} - URL-safe target branch
# {{head_sha}}         - Full commit SHA (40 chars)
# {{head_short_sha}}   - Short commit SHA (first 8 chars)
# {{head_short_sha_7}} - 7-character commit SHA
# {{labels}}           - Array of PR labels
#
# Best Practices:
# 1. Use {{head_sha}} for targetRevision (immutable reference)
# 2. Use {{number}} for resource naming (unique identifier)
# 3. Use {{branch_slug}} when you need branch info in names
# 4. Always add finalizers for cleanup
# 5. Use dedicated project with limited permissions
# 6. Set resource limits to prevent preview sprawl
# 7. Consider TTL/auto-cleanup for old previews
# =============================================================================