From 4cd1f5b9086c7c6185ab68d06561c37ef8666304 Mon Sep 17 00:00:00 2001
From: fchinembiri <fchinembiri24@gmail.com>
Date: Sat, 11 Jul 2026 18:56:42 +0200
Subject: [PATCH] feat: configure nextgen kustomization and fix applicationset
 branch generator

---
 k8s/argocd-nextgen.yaml                       | 14 +++++---------
 k8s/nextgen/45-infisical-secrets.yaml         | 10 ++++++++++
 k8s/nextgen/kustomization.yaml                |  5 +++++
 k8s/nextgen/supabase-nextgen-credentials.yaml | 16 ++++++++++++++++
 4 files changed, 36 insertions(+), 9 deletions(-)
 create mode 100644 k8s/nextgen/45-infisical-secrets.yaml
 create mode 100644 k8s/nextgen/supabase-nextgen-credentials.yaml

diff --git a/k8s/argocd-nextgen.yaml b/k8s/argocd-nextgen.yaml
index 7779119..55c0d41 100644
--- a/k8s/argocd-nextgen.yaml
+++ b/k8s/argocd-nextgen.yaml
@@ -79,15 +79,11 @@ metadata:
   namespace: argocd
 spec:
   generators:
-    - scmProvider:
-        gitea:
-          owner: fchinembiri
-          api: http://gitea.geocrop.svc.cluster.local:3000
-          tokenRef:
-            secretName: gitea-repo-creds
-            key: password
-        filters:
-          - repositoryMatch: ^geocrop-platform$
+    - list:
+        elements:
+          - branch: main
+          - branch: dev
+
   template:
     metadata:
       name: 'next-gen-{{branch}}'
diff --git a/k8s/nextgen/45-infisical-secrets.yaml b/k8s/nextgen/45-infisical-secrets.yaml
new file mode 100644
index 0000000..2a4ff22
--- /dev/null
+++ b/k8s/nextgen/45-infisical-secrets.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: infisical-secrets
+  namespace: nextgen
+type: Opaque
+stringData:
+  ENCRYPTION_KEY: "0123456789abcdef0123456789abcdef"
+  AUTH_SECRET: "somesupersecretstring"
+  JWT_AUTH_SECRET: "anothersecretstring"
diff --git a/k8s/nextgen/kustomization.yaml b/k8s/nextgen/kustomization.yaml
index eb02d1c..660dd14 100644
--- a/k8s/nextgen/kustomization.yaml
+++ b/k8s/nextgen/kustomization.yaml
@@ -6,4 +6,9 @@ resources:
   - 10-postgres.yaml
   - 20-mattermost.yaml
   - 30-vaultwarden.yaml
+  - 45-infisical-secrets.yaml
+  - supabase-nextgen-credentials.yaml
+  - supabase-nextgen.yaml
+  - supabase-nextgen-ingress.yaml
+
 
diff --git a/k8s/nextgen/supabase-nextgen-credentials.yaml b/k8s/nextgen/supabase-nextgen-credentials.yaml
new file mode 100644
index 0000000..5eea210
--- /dev/null
+++ b/k8s/nextgen/supabase-nextgen-credentials.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: supabase-nextgen-credentials
+  namespace: nextgen
+type: Opaque
+stringData:
+  db_password: "t7dXSnPvqrqfbQiiq3Q2dtf3"
+  jwt_secret: "5fgEzZpSgWi0CQgCNfR1w514k2UF0aZQFbufv5HU"
+  anon_key: "eyJhbGciOiAiSFMyNTYiLCAidHlwIjogIkpXVCJ9.eyJyb2xlIjogImFub24iLCAiaXNzIjogInN1cGFiYXNlLWRlbW8iLCAiaWF0IjogMTY0MTc2OTIwMCwgImV4cCI6IDE3OTk1MzU2MDB9.9m85_AQzPUfPNQ4waxRCp2lUg8wlEtroYTUpJx-NBmM"
+  service_role_key: "eyJhbGciOiAiSFMyNTYiLCAidHlwIjogIkpXVCJ9.eyJyb2xlIjogInNlcnZpY2Vfcm9sZSIsICJpc3MiOiAic3VwYWJhc2UtZGVtbyIsICJpYXQiOiAxNjQxNzY5MjAwLCAiZXhwIjogMTc5OTUzNTYwMH0.JJwv5VsUNFe01HtBwT464QdzFyezfR1t4HgqFMpeDz8"
+  dashboard_password: "xWIe2AchIPrtCbUt"
+  realtime_secret: "8vb3nS5uEAgjRI0HdiJTwkwPXuD0OryFS0OvO9nu2OzfE4jvROanP2IvLkcYvRWF"
+  crypto_key: "YtkOxNE5MMpRaWQXtrUpmbBKNWdxe5c9"
+  analytics_public: "xbjnDkysTsOgVcHCFYzr2w7k7X7GM8ae"
+  analytics_private: "HRVeMMlVPD4d3vxHYeOtj0MFlCuntBtE"