argocdproject

README

ArgoCDProject Generator

It is a plugin for Kustomize that allows you to generate Argo's AppProject and Applications with its access control definitions.

Using

The plugin's manifest is pretty simple. It defines the following attributes:

• spec.accessControl: allows role access management. In it, you can define which groups will have read-only and read-sync access to all applications within the project.

• spec.appProjectTemplate: allows any additional fields for the argoproj.io AppProject.

• spec.applicationTemplates: allows multiple argoproj.io Application to be defined, since one project can contain multiple applications.

An ArgoCDProject can be defined as:

# employees.argoCDProject.yaml

apiVersion: incognia.com/v1alpha1
kind: ArgoCDProject
metadata:
  name: employees
spec:
  accessControl:
    readOnly:
      - sre:eng-1
    readSync:
      - sre:eng-0
  appProjectTemplate:
    spec:
      clusterResourceBlacklist:
        - group: ''
          kind: Secret
  applicationTemplates:
    - metadata:
        name: employees
      spec:
        source:
          repoURL: https://github.com/t0rr3sp3dr0/employees.git
          targetRevision: argocd-stag
          path: ./k8s/overlays/global-staging/
        destination:
          name: GlobalStaging-Product
          namespace: employees

Now we can specify ./employees.argoCDProject.yaml as a generator in kustomization.yaml:

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
generators:
  - ./employees.argoCDProject.yaml