tegwick
64d7c18c3f
Define platform-owned AppProjects, root app-of-apps, repository registration templates, and tenant onboarding docs so issue-core can deploy via ArgoCD. Ignore encrypted repository secrets locally and cross-link OpenBao delivery guidance with the new GitOps contract.
53 lines
1.2 KiB
YAML
53 lines
1.2 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: AppProject
|
|
metadata:
|
|
name: railiance-tenants
|
|
namespace: argocd
|
|
labels:
|
|
app.kubernetes.io/part-of: railiance-gitops
|
|
railiance-platform/component: gitops
|
|
spec:
|
|
description: Guardrails for Railiance tenant applications deployed by ArgoCD.
|
|
sourceRepos:
|
|
- https://gitea.coulomb.social/coulomb/*.git
|
|
destinations:
|
|
- server: https://kubernetes.default.svc
|
|
namespace: "*"
|
|
clusterResourceWhitelist:
|
|
- group: ""
|
|
kind: Namespace
|
|
namespaceResourceWhitelist:
|
|
- group: ""
|
|
kind: ConfigMap
|
|
- group: ""
|
|
kind: PersistentVolumeClaim
|
|
- group: ""
|
|
kind: Secret
|
|
- group: ""
|
|
kind: Service
|
|
- group: ""
|
|
kind: ServiceAccount
|
|
- group: apps
|
|
kind: Deployment
|
|
- group: apps
|
|
kind: StatefulSet
|
|
- group: autoscaling
|
|
kind: HorizontalPodAutoscaler
|
|
- group: batch
|
|
kind: CronJob
|
|
- group: batch
|
|
kind: Job
|
|
- group: external-secrets.io
|
|
kind: ExternalSecret
|
|
- group: networking.k8s.io
|
|
kind: Ingress
|
|
- group: networking.k8s.io
|
|
kind: NetworkPolicy
|
|
- group: traefik.io
|
|
kind: IngressRoute
|
|
- group: traefik.io
|
|
kind: Middleware
|
|
orphanedResources:
|
|
warn: true
|
|
|