54 lines
1.3 KiB
YAML
54 lines
1.3 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: AppProject
|
|
metadata:
|
|
name: authentik
|
|
namespace: argocd
|
|
spec:
|
|
description: Authentik identity provider and homelab integrations
|
|
sourceRepos:
|
|
- https://charts.goauthentik.io
|
|
- https://code.brunner.ninja/feedc0de/homelab-gitops.git
|
|
destinations:
|
|
- namespace: authentik
|
|
server: https://kubernetes.default.svc
|
|
- namespace: rook-ceph
|
|
server: https://kubernetes.default.svc
|
|
clusterResourceWhitelist:
|
|
- group: ""
|
|
kind: Namespace
|
|
- group: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
- group: rbac.authorization.k8s.io
|
|
kind: ClusterRoleBinding
|
|
namespaceResourceWhitelist:
|
|
- group: ""
|
|
kind: ConfigMap
|
|
- group: ""
|
|
kind: PersistentVolumeClaim
|
|
- group: ""
|
|
kind: Service
|
|
- group: ""
|
|
kind: ServiceAccount
|
|
- group: apps
|
|
kind: Deployment
|
|
- group: apps
|
|
kind: StatefulSet
|
|
- group: ceph.rook.io
|
|
kind: CephObjectStoreUser
|
|
- group: monitoring.coreos.com
|
|
kind: PrometheusRule
|
|
- group: networking.k8s.io
|
|
kind: Ingress
|
|
- group: networking.k8s.io
|
|
kind: NetworkPolicy
|
|
- group: policy
|
|
kind: PodDisruptionBudget
|
|
- group: rbac.authorization.k8s.io
|
|
kind: Role
|
|
- group: rbac.authorization.k8s.io
|
|
kind: RoleBinding
|
|
- group: traefik.io
|
|
kind: IngressRoute
|
|
- group: traefik.io
|
|
kind: Middleware
|