Add secure portfolio foundation

2026-07-16 05:16:02 +00:00
parent 155c31b8a2
commit be79a1e9f3
14 changed files with 1034 additions and 0 deletions
@@ -0,0 +1,39 @@
+apiVersion: argoproj.io/v1alpha1
+kind: AppProject
+metadata:
+  name: portfolio
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
+spec:
+  description: Restricted GitOps project for the public portfolio workload
+
+  sourceRepos:
+    - http://git.home.lan/jay/k8s-gitops.git
+
+  destinations:
+    - namespace: portfolio
+      server: https://kubernetes.default.svc
+
+  namespaceResourceWhitelist:
+    - group: ""
+      kind: ConfigMap
+    - group: ""
+      kind: LimitRange
+    - group: ""
+      kind: ResourceQuota
+    - group: ""
+      kind: Service
+    - group: ""
+      kind: ServiceAccount
+    - group: apps
+      kind: Deployment
+    - group: networking.k8s.io
+      kind: Ingress
+    - group: networking.k8s.io
+      kind: NetworkPolicy
+    - group: policy
+      kind: PodDisruptionBudget
+
+  orphanedResources:
+    warn: true