apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: infisical-operator-rbac
  namespace: argocd
spec:
  destination:
    namespace: infisical-operator
    server: https://kubernetes.default.svc
  project: default
  source:
    path: infisical-operator-rbac
    repoURL: https://git.chemavx.xyz/chemavx/k8s-manifests
    targetRevision: main
  ignoreDifferences:
    # token controller injects .data into the Secret; don't let selfHeal wipe it
    - group: ""
      kind: Secret
      name: infisical-token-reviewer
      jsonPointers:
        - /data
  syncPolicy:
    automated:
      prune: true
      selfHeal: true