{{- if and
  .Values.commons.auth.enabled (eq .Values.commons.auth.type "authentik")
  .Values.karma.enabled
}}
---
apiVersion: helm.toolkit.fluxcd.io/v2beta2
kind: HelmRelease
metadata:
  name: authentik-application-karma
spec:
  chart:
    spec:
      sourceRef:
        kind: GitRepository
        name: "wrenix-helm-charts"
        namespace: "flux-system"
      chart: "./authentik-application"
      reconcileStrategy: "Revision"
  releaseName: authentik-application-infra-karma
  targetNamespace: {{ .Values.commons.auth.namespace }}
  install:
    {{- toYaml .Values.commons.helm.release.install | nindent 4 }}
  test:
    {{- toYaml .Values.commons.helm.release.test | nindent 4 }}
  upgrade:
    {{- toYaml .Values.commons.helm.release.upgrade | nindent 4 }}
  driftDetection:
    {{- toYaml .Values.commons.helm.release.driftDetection | nindent 4 }}
  interval: 10m
  values:
    {{- $domain := .Values.karma.ingress.host | default (printf "karma.%s" .Values.commons.ingress.domain) }}
    {{- $url := printf "https://%s" $domain }}
    blueprint:
      authentik:
        domain: "https://{{ .Values.commons.auth.authentik.domain }}"
      provider:
        enabled: {{ not .Values.karma.auth.anonymous.enabled }}
        type: "proxy"
        proxy:
          externalHost: {{ $url | quote }}
          skipPathRegex: |
            /favicon.ico
          ingress:
            enabled: true
            domain: {{ $domain | quote }}
            backend: {{ .Values.commons.auth.authentik.backend }}
            {{- with $.Values.commons.ingress.annotations }}
            annotations:
              {{- toYaml . | nindent 14 }}
            {{- end }}
            {{- if $.Values.commons.ingress.tls.enabled }}
            tls:
              {{- with $.Values.commons.ingress.tls.override }}
              {{- toYaml . | nindent 14 }}
              {{- else }}
              - secretName: "infra-monitoring-karma-cert"
                hosts:
                  - {{ $domain | quote }}
              {{- end }}
            {{- end }}

      groups:
        - slug: "app: infra"
          bindID: "e4bda29f-0059-4590-9451-bc4ddd24b666"

      application:
        group: "Infrastructure"
        policyEngineMode: "any"
        openInNewTab: true
        publisher: "WrenIX's Infra"
        slug: "infra-karma"
        name: "Karma"
        launchURL: {{ $url | quote }}
        icon: "{{ $url }}/favicon.ico"
        description: "Alertmanager UI is useful for browsing alerts and managing silences, but it’s lacking as a dashboard tool - karma aims to fill this gap."
{{- end }}