apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: local-path-provisioner
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "-5"
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: https://github.com/rancher/local-path-provisioner.git
    targetRevision: v0.0.32
    path: deploy
    kustomize:
      patches:
        # Configure storage path for Talos
        - target:
            kind: ConfigMap
            name: local-path-config
          patch: |-
            - op: replace
              path: /data/config.json
              value: |-
                {
                  "nodePathMap":[
                    {
                      "node":"DEFAULT_PATH_FOR_NON_LISTED_NODES",
                      "paths":["/var/mnt/local-path-provisioner"]
                    }
                  ]
                }
        
        # Don't set as default StorageClass (Ceph is default)
        - target:
            kind: StorageClass
            name: local-path
          patch: |-
            - op: replace
              path: /metadata/annotations/storageclass.kubernetes.io~1is-default-class
              value: "false"
  
  destination:
    server: https://kubernetes.default.svc
    namespace: local-path-storage
  
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: privileged
        pod-security.kubernetes.io/audit: privileged
        pod-security.kubernetes.io/warn: privileged