ivanch
510e18e5dc
- appset: goTemplate, filename-based app names, .path.path IS the directory, exclude apps/root from the glob (v3.5 git files-generator schema) - remove empty Secret stubs: with prune:true they would overwrite live secret values (openwebui, paperless, vaultwarden-admin-token, password) - secrets stay cluster-managed, not in git
18 lines
653 B
YAML
18 lines
653 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: argocd
|
|
|
|
resources:
|
|
# cluster-install already includes ALL CRDs (applications, appprojects,
|
|
# applicationsets). Do NOT also add manifests/crds — kustomize fails with
|
|
# "may not add resource with an already registered id".
|
|
- https://github.com/argoproj/argo-cd.git/manifests/cluster-install?ref=stable
|
|
- ingress.yaml
|
|
|
|
# Serve plain HTTP behind the nginx ingress (TLS terminates at nothing —
|
|
# internal-only app convention). Applied live via kubectl patch on first
|
|
# install; this file keeps git as the source of truth.
|
|
patches:
|
|
- path: server-insecure-patch.yaml
|