gistfile1.txt

apiVersion: helm.fluxcd.io/v1
kind: HelmRelease
metadata:
  name: pomerium
  namespace: pomerium-system
spec:
  releaseName: pomerium
  chart:
    repository: https://helm.pomerium.io
    version: 6.0.1
    name: pomerium
  values:
    authenticate:
      idp:
        provider: azure
        url: https://login.microsoftonline.com/replaced/v2.0
    config:
      existingSecret: pomerium-secret
      generateTlS: true
      forceGenerateTLS: true
      rootDomain: foo.com
    ingress:
      secretName: pomerium-tls
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod