apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: platform
  namespace: argocd
spec:
  description: Development Argo self-management and adopted platform routes only
  sourceRepos:
  - git://pharos-platform-git.argocd.svc.cluster.local/platform.git
  destinations:
  - server: https://kubernetes.default.svc:443
    namespace: argocd
  - server: https://kubernetes.default.svc.cluster.local
    namespace: argocd
  - server: https://kubernetes.default.svc.cluster.local
    namespace: istio-system
  - server: https://kubernetes.default.svc.cluster.local
    namespace: pharos-aai
  - server: https://kubernetes.default.svc.cluster.local
    namespace: rook-ceph
  - server: https://kubernetes.default.svc.cluster.local
    namespace: gitlab
  - server: https://kubernetes.default.svc.cluster.local
    namespace: waldur
  - server: https://kubernetes.default.svc.cluster.local
    namespace: themelio-compat
  - server: https://kubernetes.default.svc.cluster.local
    namespace: mcp
  - server: https://kubernetes.default.svc.cluster.local
    namespace: zammad
  - server: https://kubernetes.default.svc.cluster.local
    namespace: pharos
  clusterResourceWhitelist:
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
  - group: rbac.authorization.k8s.io
    kind: ClusterRole
  - group: rbac.authorization.k8s.io
    kind: ClusterRoleBinding
  namespaceResourceWhitelist:
  - group: ''
    kind: ConfigMap
  - group: ''
    kind: Secret
  - group: ''
    kind: Service
  - group: ''
    kind: ServiceAccount
  - group: apps
    kind: Deployment
  - group: apps
    kind: StatefulSet
  - group: batch
    kind: Job
  - group: rbac.authorization.k8s.io
    kind: Role
  - group: rbac.authorization.k8s.io
    kind: RoleBinding
  - group: argoproj.io
    kind: Application
  - group: networking.k8s.io
    kind: NetworkPolicy
  - group: networking.istio.io
    kind: Gateway
  - group: networking.istio.io
    kind: VirtualService
  - group: networking.istio.io
    kind: DestinationRule
  - group: networking.istio.io
    kind: EnvoyFilter
  - group: security.istio.io
    kind: AuthorizationPolicy
  orphanedResources:
    warn: false