b679668a2e
[hotfix] Allow k8s repo Co-authored-by: Boris Shestov <shestov1989@mail.ru> Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/139 Reviewed-by: Denis Patrakeev <denis.patrakeev@avroid.team>
52 lines
1.6 KiB
YAML
52 lines
1.6 KiB
YAML
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: webhook-receiver
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: webhook-receiver
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: avroid-prod
|
|
sources:
|
|
- repoURL: https://git.avroid.tech/K8s/k8s-configs.git
|
|
targetRevision: master
|
|
ref: values
|
|
- repoURL: https://nexus.avroid.tech/repository/devops-helm-proxy-helm/
|
|
chart: "actual-devops/webhook-receiver"
|
|
targetRevision: 0.3.0
|
|
helm:
|
|
valueFiles:
|
|
- $values/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/automations-tools/webhook-receiver/values-override.yaml
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- ApplyOutOfSyncOnly=true
|
|
- CreateNamespace=true
|
|
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: AppProject
|
|
metadata:
|
|
name: webhook-receiver
|
|
namespace: argocd
|
|
# Finalizer that ensures that project is not deleted until it is not referenced by any application
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
sourceRepos:
|
|
- https://git.avroid.tech/K8s/k8s-configs.git
|
|
- https://nexus.avroid.tech/repository/devops-helm-proxy-helm/
|
|
# Only permit applications to deploy to the guestbook namespace in the same cluster
|
|
destinations:
|
|
- namespace: avroid-prod
|
|
server: https://kubernetes.default.svc
|
|
# Deny all cluster-scoped resources from being created, except for Namespace
|
|
clusterResourceWhitelist:
|
|
- group: ''
|
|
kind: Namespace
|