51 lines
1.4 KiB
YAML
51 lines
1.4 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: AppProject
|
|
metadata:
|
|
name: platform-addons
|
|
namespace: argocd
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "-10"
|
|
argocd.argoproj.io/sync-options: Prune=confirm,Delete=confirm
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
description: Cluster-scoped controllers installed from approved Helm repositories
|
|
sourceRepos:
|
|
- https://bitnami.github.io/sealed-secrets
|
|
- https://helm.releases.hashicorp.com
|
|
destinations:
|
|
- namespace: kube-system
|
|
server: https://kubernetes.default.svc
|
|
- namespace: vault
|
|
server: https://kubernetes.default.svc
|
|
clusterResourceWhitelist:
|
|
- group: ""
|
|
kind: Namespace
|
|
- group: apiextensions.k8s.io
|
|
kind: CustomResourceDefinition
|
|
- group: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
- group: rbac.authorization.k8s.io
|
|
kind: ClusterRoleBinding
|
|
- group: admissionregistration.k8s.io
|
|
kind: MutatingWebhookConfiguration
|
|
namespaceResourceWhitelist:
|
|
- group: ""
|
|
kind: ConfigMap
|
|
- group: ""
|
|
kind: Secret
|
|
- group: ""
|
|
kind: Service
|
|
- group: ""
|
|
kind: ServiceAccount
|
|
- group: apps
|
|
kind: Deployment
|
|
- group: policy
|
|
kind: PodDisruptionBudget
|
|
- group: rbac.authorization.k8s.io
|
|
kind: Role
|
|
- group: rbac.authorization.k8s.io
|
|
kind: RoleBinding
|
|
orphanedResources:
|
|
warn: true
|