apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
name: badhouseplants
namespace: platform
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
description: BadHouseplants Blog
sourceRepos:
- '*'
destinations:
- namespace: badhouseplants-*
server: https://kubernetes.default.svc
name: in-cluster
# Deny all cluster-scoped resources from being created, except for Namespace
clusterResourceWhitelist:
- group: ''
kind: Namespace
# Allow all namespaced-scoped resources to be created, except for ResourceQuota, LimitRange, NetworkPolicy
namespaceResourceBlacklist:
kind: ResourceQuota
kind: LimitRange
kind: NetworkPolicy
# Enables namespace orphaned resource monitoring.
orphanedResources:
warn: false