apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: diun
  namespace: argocd
spec:
  description: Diun workload and its Kubernetes discovery permissions
  sourceRepos:
  - https://brunner.ninja/charts
  - https://code.brunner.ninja/feedc0de/homelab-gitops.git
  destinations:
  - namespace: diun
    server: https://kubernetes.default.svc
  clusterResourceWhitelist:
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
  - group: rbac.authorization.k8s.io
    kind: ClusterRoleBinding
  namespaceResourceWhitelist:
  - group: ""
    kind: ConfigMap
  - group: ""
    kind: PersistentVolumeClaim
  - group: ""
    kind: ServiceAccount
  - group: apps
    kind: Deployment