Files
whentimeslows c351a1c3d6
Deploy home services / deploy-nas1 (push) Has been cancelled
Deploy home services / deploy-rhel1 (push) Has been cancelled
Allow privileged infrastructure chart namespaces
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-10-09 10:50:31 -06:00

44 lines
1.3 KiB
YAML

apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
name: infrastructure
namespace: argocd
spec:
goTemplate: true
generators:
- git:
repoURL: https://git.sorells.me/whentimeslows/home-services.git
revision: main
directories:
- path: infrastructure/*
- path: infrastructure/*/templates
exclude: true
template:
metadata:
name: 'infrastructure-{{.path.basename}}'
labels:
app.kubernetes.io/part-of: home-services
home-services.sorells.me/layer: infrastructure
spec:
project: default
source:
repoURL: https://git.sorells.me/whentimeslows/home-services.git
targetRevision: main
path: '{{.path.path}}'
helm:
releaseName: '{{.path.basename}}'
destination:
server: https://kubernetes.default.svc
namespace: '{{if eq .path.basename "longhorn"}}longhorn-system{{else}}{{.path.basename}}{{end}}'
syncPolicy:
automated:
prune: true
selfHeal: true
managedNamespaceMetadata:
labels:
pod-security.kubernetes.io/enforce: privileged
pod-security.kubernetes.io/audit: privileged
pod-security.kubernetes.io/warn: privileged
syncOptions:
- CreateNamespace=true