# k8s/argocd/projects/homelab-project.yaml
# AppProject referenced by every Application manifest under k8s/argocd/apps/
# (project: homelab) — was never committed, so 00-homelab-root.yaml and all
# layer/wave/phase apps fail admission with "application references project
# 'homelab' which does not exist" until this exists.
apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: homelab
  namespace: argocd
spec:
  description: Homelab GitOps — single-repo, in-cluster destinations only
  sourceRepos:
    - https://github.com/Riotpiaole/riotpiao.homelab.com.git
    # Poimen services (GitHub)
    - https://github.com/Riotpiaole/Poimen-memory.git
    - https://github.com/Riotpiaole/Poimen-workflows.git
    - https://github.com/Riotpiaole/poimen*.git
    # In-cluster Forgejo repos — explicit allowlist (no wildcard)
    - https://forgejo.riotpiao.com/rock/homelab.git
    - https://forgejo.riotpiao.com/rock/homelab-frontend.git
    - https://forgejo.riotpiao.com/rock/kmsvc-manage.git
    - https://forgejo.riotpiao.com/rock/poimen.git
    - https://forgejo.riotpiao.com/rock/riotpiao.com.git
    # Public Helm chart repos referenced by k8s/argocd/apps/* and bootstrap/*
    - https://cloudnative-pg.github.io/charts
    - https://dl.gitea.com/charts/
    - https://charts.min.io/
    - https://operator.min.io/
    - https://prometheus-community.github.io/helm-charts
    - https://grafana.github.io/helm-charts
    - https://helm.releases.hashicorp.com
    - https://charts.goauthentik.io
    - https://strimzi.io/charts/
    - https://charts.bitnami.com/bitnami
    - https://homarr-labs.github.io/charts
    - https://go.temporal.io/helm-charts
    - https://portainer.github.io/k8s/
    # Substrate charts (cert-manager, ingress-nginx, reloader) — app-of-apps owned
    - https://charts.jetstack.io
    - https://kubernetes.github.io/ingress-nginx
    - https://stakater.github.io/stakater-charts
  destinations:
    - server: https://kubernetes.default.svc
      namespace: "*"
  clusterResourceWhitelist:
    - group: "*"
      kind: "*"
  namespaceResourceWhitelist:
    - group: "*"
      kind: "*"