rock
e2d9717ce1
The zitadel Application failed its first sync with InvalidSpecError: application repo https://charts.zitadel.com is not permitted in project 'homelab'. AppProject sourceRepos is an allowlist, so the chart repo must be listed before any chart from it can be reconciled.
59 lines
2.5 KiB
YAML
59 lines
2.5 KiB
YAML
# k8s/argocd/projects/homelab-project.yaml
|
|
# AppProject referenced by every Application manifest under k8s/argocd/apps/
|
|
# (project: homelab) — was never committed, so 00-homelab-root.yaml and all
|
|
# layer/wave/phase apps fail admission with "application references project
|
|
# 'homelab' which does not exist" until this exists.
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: AppProject
|
|
metadata:
|
|
name: homelab
|
|
namespace: argocd
|
|
spec:
|
|
description: Homelab GitOps — single-repo, in-cluster destinations only
|
|
sourceRepos:
|
|
- https://github.com/Riotpiaole/riotpiao.homelab.com.git
|
|
# Poimen services (GitHub)
|
|
- https://github.com/Riotpiaole/Poimen-memory.git
|
|
- https://github.com/Riotpiaole/Poimen-workflows.git
|
|
- https://github.com/Riotpiaole/poimen*.git
|
|
# In-cluster Forgejo repos — explicit allowlist (no wildcard)
|
|
- https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git
|
|
- https://forgejo.riotpiao.com/riotpiao-poimen/homelab-frontend.git
|
|
- https://forgejo.riotpiao.com/riotpiao-poimen/kmsvc-manage.git
|
|
- https://forgejo.riotpiao.com/riotpiao-poimen/poimen.git
|
|
- https://forgejo.riotpiao.com/riotpiao-poimen/poimen-memory.git
|
|
- https://forgejo.riotpiao.com/riotpiao-poimen/poimen-workflows.git
|
|
- https://forgejo.riotpiao.com/riotpiao-poimen/poimen-frontend.git
|
|
- https://forgejo.riotpiao.com/riotpiao-poimen/poimen-toolkit.git
|
|
- https://forgejo.riotpiao.com/rock/riotpiao.com.git
|
|
# Public Helm chart repos referenced by k8s/argocd/apps/* and bootstrap/*
|
|
- https://cloudnative-pg.github.io/charts
|
|
- https://dl.gitea.com/charts/
|
|
- https://charts.min.io/
|
|
- https://operator.min.io/
|
|
- https://prometheus-community.github.io/helm-charts
|
|
- https://grafana.github.io/helm-charts
|
|
- https://helm.releases.hashicorp.com
|
|
- https://charts.goauthentik.io
|
|
- https://charts.zitadel.com
|
|
- https://strimzi.io/charts/
|
|
- https://charts.bitnami.com/bitnami
|
|
- https://homarr-labs.github.io/charts
|
|
- https://go.temporal.io/helm-charts
|
|
- https://portainer.github.io/k8s/
|
|
# Substrate charts (cert-manager, ingress-nginx, reloader) — app-of-apps owned
|
|
- https://charts.jetstack.io
|
|
- https://kubernetes.github.io/ingress-nginx
|
|
- https://stakater.github.io/stakater-charts
|
|
# ArgoCD ecosystem charts
|
|
- https://argoproj.github.io/argo-helm
|
|
destinations:
|
|
- server: https://kubernetes.default.svc
|
|
namespace: "*"
|
|
clusterResourceWhitelist:
|
|
- group: "*"
|
|
kind: "*"
|
|
namespaceResourceWhitelist:
|
|
- group: "*"
|
|
kind: "*"
|