apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: authentik
  namespace: argocd
spec:
  description: Authentik identity provider and homelab integrations
  sourceRepos:
  - https://charts.goauthentik.io
  - https://code.brunner.ninja/feedc0de/homelab-gitops.git
  destinations:
  - namespace: authentik
    server: https://kubernetes.default.svc
  - namespace: rook-ceph
    server: https://kubernetes.default.svc
  clusterResourceWhitelist:
  - group: ""
    kind: Namespace
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
  - group: rbac.authorization.k8s.io
    kind: ClusterRoleBinding
  namespaceResourceWhitelist:
  - group: ""
    kind: ConfigMap
  - group: ""
    kind: PersistentVolumeClaim
  - group: ""
    kind: Service
  - group: ""
    kind: ServiceAccount
  - group: apps
    kind: Deployment
  - group: apps
    kind: StatefulSet
  - group: ceph.rook.io
    kind: CephObjectStoreUser
  - group: monitoring.coreos.com
    kind: PrometheusRule
  - group: networking.k8s.io
    kind: Ingress
  - group: networking.k8s.io
    kind: NetworkPolicy
  - group: policy
    kind: PodDisruptionBudget
  - group: rbac.authorization.k8s.io
    kind: Role
  - group: rbac.authorization.k8s.io
    kind: RoleBinding
  - group: traefik.io
    kind: IngressRoute
  - group: traefik.io
    kind: Middleware