apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: cilium
  namespace: argocd
spec:
  description: Cilium CNI, Hubble PKI, and availability alerts
  sourceRepos:
  - https://helm.cilium.io/
  - https://code.brunner.ninja/feedc0de/homelab-gitops.git
  destinations:
  - namespace: kube-system
    server: https://kubernetes.default.svc
  - namespace: cilium-secrets
    server: https://kubernetes.default.svc
  - namespace: prometheus
    server: https://kubernetes.default.svc
  clusterResourceWhitelist:
  - group: ""
    kind: Namespace
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
  - group: rbac.authorization.k8s.io
    kind: ClusterRoleBinding
  namespaceResourceWhitelist:
  - group: ""
    kind: ConfigMap
  - group: ""
    kind: Service
  - group: ""
    kind: ServiceAccount
  - group: apps
    kind: DaemonSet
  - group: apps
    kind: Deployment
  - group: cert-manager.io
    kind: Certificate
  - group: cert-manager.io
    kind: Issuer
  - group: monitoring.coreos.com
    kind: PrometheusRule
  - group: policy
    kind: PodDisruptionBudget
  - group: rbac.authorization.k8s.io
    kind: Role
  - group: rbac.authorization.k8s.io
    kind: RoleBinding