Add dedicated Cloudflare Tunnel for portfolio

2026-07-16 06:08:54 +00:00
parent 4b8aeb524e
commit 08c458a078
12 changed files with 447 additions and 0 deletions
@@ -0,0 +1,39 @@
+apiVersion: argoproj.io/v1alpha1
+kind: AppProject
+metadata:
+  name: portfolio-edge
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
+spec:
+  description: Restricted GitOps project for the public portfolio Cloudflare Tunnel
+
+  sourceRepos:
+    - http://git.home.lan/jay/k8s-gitops.git
+
+  destinations:
+    - namespace: portfolio-edge
+      server: https://kubernetes.default.svc
+
+  namespaceResourceWhitelist:
+    - group: ""
+      kind: LimitRange
+    - group: ""
+      kind: ResourceQuota
+    - group: ""
+      kind: ServiceAccount
+    - group: apps
+      kind: Deployment
+    - group: bitnami.com
+      kind: SealedSecret
+    - group: networking.k8s.io
+      kind: NetworkPolicy
+    - group: policy
+      kind: PodDisruptionBudget
+
+  orphanedResources:
+    warn: true
+    ignore:
+      - group: ""
+        kind: Secret
+        name: portfolio-edge-tunnel-token