k8s/argocd/projects/homelab-project.yaml

# k8s/argocd/projects/homelab-project.yaml
# AppProject referenced by every Application manifest under k8s/argocd/apps/
# (project: homelab) — was never committed, so 00-homelab-root.yaml and all
# layer/wave/phase apps fail admission with "application references project
# 'homelab' which does not exist" until this exists.
apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: homelab
  namespace: argocd
spec:
  description: Homelab GitOps — single-repo, in-cluster destinations only
  sourceRepos:
    - https://github.com/Riotpiaole/riotpiao.homelab.com.git
    # Public Helm chart repos referenced by k8s/argocd/apps/* and bootstrap/*
    - https://cloudnative-pg.github.io/charts
    - https://dl.gitea.com/charts/
    - https://charts.min.io/
    - https://operator.min.io/
    - https://prometheus-community.github.io/helm-charts
    - https://grafana.github.io/helm-charts
    - https://helm.releases.hashicorp.com
    - https://charts.goauthentik.io
    - https://strimzi.io/charts/
    - https://charts.bitnami.com/bitnami
    - https://homarr-labs.github.io/charts
    - https://go.temporal.io/helm-charts
    - https://portainer.github.io/k8s/
    # Substrate charts (cert-manager, ingress-nginx, reloader) — app-of-apps owned
    - https://charts.jetstack.io
    - https://kubernetes.github.io/ingress-nginx
    - https://stakater.github.io/stakater-charts
  destinations:
    - server: https://kubernetes.default.svc
      namespace: "*"
  clusterResourceWhitelist:
    - group: "*"
      kind: "*"
  namespaceResourceWhitelist:
    - group: "*"
      kind: "*"
feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications 2026-07-19 09:29:17 -07:00			`# k8s/argocd/projects/homelab-project.yaml`
			`# AppProject referenced by every Application manifest under k8s/argocd/apps/`
			`# (project: homelab) — was never committed, so 00-homelab-root.yaml and all`
			`# layer/wave/phase apps fail admission with "application references project`
			`# 'homelab' which does not exist" until this exists.`
			`apiVersion: argoproj.io/v1alpha1`
			`kind: AppProject`
			`metadata:`
			`name: homelab`
			`namespace: argocd`
			`spec:`
			`description: Homelab GitOps — single-repo, in-cluster destinations only`
			`sourceRepos:`
fix(argocd): clone the public GitHub seed anonymously over HTTPS and delete the SSH deploy-key Secret — its private half had been committed in plaintext to a public remote, and a public repo needs no credential at all 2026-08-13 18:02:52 -07:00			`- https://github.com/Riotpiaole/riotpiao.homelab.com.git`
refactor(argocd): replace wave/layer/phase schemes with two-phase bootstrap + app-of-apps and document both CD scopes — fixes self-hosted-git chicken-egg and stale paths 2026-07-20 08:22:53 -07:00			`# Public Helm chart repos referenced by k8s/argocd/apps/* and bootstrap/*`
feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications 2026-07-19 09:29:17 -07:00			`- https://cloudnative-pg.github.io/charts`
			`- https://dl.gitea.com/charts/`
refactor(argocd): replace wave/layer/phase schemes with two-phase bootstrap + app-of-apps and document both CD scopes — fixes self-hosted-git chicken-egg and stale paths 2026-07-20 08:22:53 -07:00			`- https://charts.min.io/`
fix(minio): correct operator chart source + rewrite Tenant to v5 schema + config.env creds — tenant now boots 2026-08-18 15:08:02 -07:00			`- https://operator.min.io/`
refactor(argocd): replace wave/layer/phase schemes with two-phase bootstrap + app-of-apps and document both CD scopes — fixes self-hosted-git chicken-egg and stale paths 2026-07-20 08:22:53 -07:00			`- https://prometheus-community.github.io/helm-charts`
			`- https://grafana.github.io/helm-charts`
			`- https://helm.releases.hashicorp.com`
			`- https://charts.goauthentik.io`
			`- https://strimzi.io/charts/`
			`- https://charts.bitnami.com/bitnami`
feat(homarr): bring up chart (repo/sourceRepos, image tag, minimal values schema) 2026-08-18 15:08:03 -07:00			`- https://homarr-labs.github.io/charts`
refactor(argocd): replace wave/layer/phase schemes with two-phase bootstrap + app-of-apps and document both CD scopes — fixes self-hosted-git chicken-egg and stale paths 2026-07-20 08:22:53 -07:00			`- https://go.temporal.io/helm-charts`
			`- https://portainer.github.io/k8s/`
feat(substrate): deploy cert-manager/ingress-nginx/reloader + privileged PodSecurity for ingress-nginx 2026-08-18 15:08:02 -07:00			`# Substrate charts (cert-manager, ingress-nginx, reloader) — app-of-apps owned`
			`- https://charts.jetstack.io`
			`- https://kubernetes.github.io/ingress-nginx`
			`- https://stakater.github.io/stakater-charts`
feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications 2026-07-19 09:29:17 -07:00			`destinations:`
			`- server: https://kubernetes.default.svc`
			`namespace: "*"`
			`clusterResourceWhitelist:`
			`- group: "*"`
			`kind: "*"`
			`namespaceResourceWhitelist:`
			`- group: "*"`
			`kind: "*"`