try kustomize patch with argocd

chart/templates/apps.yaml

@@ -1,4 +1,4 @@
-{{- range $app_name := .Values.tools -}}
+{{- range $app_name, $app := .Values.tools }}
 ---
 apiVersion: argoproj.io/v1alpha1
 kind: Application
@@ -13,6 +13,16 @@ spec:
     repoURL: https://gitea.arcodange.duckdns.org/arcodange-org/tools
     targetRevision: HEAD
     path: {{ $app_name }}
+    {{- if $app.patches }}
+    helm:
+      patches:
+        {{- range $patch := $app.patches }}
+        - target:
+            {{- toYaml $patch.target | nindent 12 }}
+          patch: |-
+            {{ $patch.patch | nindent 12 }}
+        {{- end }}
+    {{- end }}
   destination:
     server: https://kubernetes.default.svc
     namespace: tools
@@ -22,4 +32,4 @@ spec:
       selfHeal: true
     syncOptions:
       - CreateNamespace=true
-{{ end }}
+{{- end }}

chart/values.yaml

@@ -1,9 +1,21 @@
 tools:
-  - pgbouncer
-  #- pgcat # trop contraignant: lister tous les databases/users et auth_type md5 uniquement
-  # - prometheus
-  - hashicorp-vault
-  - crowdsec
-  - redis
-  - clickhouse
-  - grafana
+  pgbouncer: {}
+  #pgcat # trop contraignant: lister tous les databases/users et auth_type md5 uniquement: {}
+  # prometheus: {}
+  hashicorp-vault: {}
+  crowdsec: {}
+  redis: {}
+  clickhouse:
+    patches:
+      - target:
+          kind: StatefulSet
+          name: clickhouse
+        patch: |-
+          - op: add
+            path: /spec/template/spec/containers/0/volumeMounts/-
+            value:
+              name: config-volume
+              mountPath: /etc/clickhouse-server/users.d/custom-users.xml
+              subPath: custom-users.xml
+              readOnly: true
+  grafana: {}