gitops

2026-09-12 19:21:41 +02:00
parent 58a443a076
commit f8ffa9e065
19 changed files with 1275 additions and 3 deletions
@@ -0,0 +1,37 @@
+# =====================================================================
+# AppProject con perimetro ristretto a namespace-A, namespace-B,
+# namespace-C. Qualunque Application che referenzi questo project e
+# provi a scrivere in un namespace diverso da questi (+ argocd, per le
+# risorse interne) viene rifiutata da Argo CD stesso.
+# =====================================================================
+apiVersion: argoproj.io/v1alpha1
+kind: AppProject
+metadata:
+  name: gitops-3ns
+  namespace: argocd
+spec:
+  description: "GitOps limitato a namespace-A, namespace-B, namespace-C"
+
+  sourceRepos:
+    - "https://github.com/<tua-org>/gitops-repo.git"
+
+  destinations:
+    - namespace: argocd
+      server: "https://kubernetes.default.svc"
+    - namespace: namespace-A
+      server: "https://kubernetes.default.svc"
+    - namespace: namespace-B
+      server: "https://kubernetes.default.svc"
+    - namespace: namespace-C
+      server: "https://kubernetes.default.svc"
+
+  clusterResourceWhitelist:
+    - group: ""
+      kind: Namespace
+
+  namespaceResourceWhitelist:
+    - group: "*"
+      kind: "*"
+
+  orphanedResources:
+    warn: true