build: Move to a separate project

kube/application.yaml

@@ -11,7 +11,7 @@ spec:
   destination:
     namespace: badhouseplants-$ARGO_APP_BRANCH
     server: https://kubernetes.default.svc
-  project: default
+  project: badhouseplants
   source:
     chart: badhouseplants-net
     targetRevision: $ARGO_APP_CHART_VERSION

kube/project.yaml

@@ -0,0 +1,34 @@
+apiVersion: argoproj.io/v1alpha1
+kind: AppProject
+metadata:
+  name: badhouseplants
+  namespace: argo-system
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  description: BadHouseplants Blog
+  sourceRepos:
+  - '*'
+
+  destinations:
+  - namespace: badhouseplants-*
+    server: https://kubernetes.default.svc
+    name: in-cluster
+
+  # Deny all cluster-scoped resources from being created, except for Namespace
+  clusterResourceWhitelist:
+  - group: ''
+    kind: Namespace
+
+  # Allow all namespaced-scoped resources to be created, except for ResourceQuota, LimitRange, NetworkPolicy
+  namespaceResourceBlacklist:
+  - group: ''
+    kind: ResourceQuota
+  - group: ''
+    kind: LimitRange
+  - group: ''
+    kind: NetworkPolicy
+
+  # Enables namespace orphaned resource monitoring.
+  orphanedResources:
+    warn: false