deepkoluguri
/
agentic-os
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Argo: explicit cluster resource whitelist for webhooks; Temporal multi-source valueFiles ref=values 

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Deep Koluguri 2026-05-11 13:35:21 -04:00
parent 0d59986a91
commit 6b519f6b12
2 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
platform/bootstrap/apps/app-temporal.yaml
View File

@ -16,10 +16,10 @@ spec:
targetRevision: 0.55.0 targetRevision: 0.55.0
helm: helm:
valueFiles: valueFiles:
- $repo/helm-values.yaml - $values/helm-values.yaml
- repoURL: http://192.168.8.248:3000/deepkoluguri/agentic-os.git - repoURL: http://192.168.8.248:3000/deepkoluguri/agentic-os.git
targetRevision: main targetRevision: main
ref: repo ref: values
path: ai-core/temporal path: ai-core/temporal
syncPolicy: syncPolicy:
automated: automated:

11
platform/bootstrap/root-app-project.yaml
View File

@ -13,8 +13,19 @@ spec:
- namespace: "*" - namespace: "*"
server: https://kubernetes.default.svc server: https://kubernetes.default.svc
clusterResourceWhitelist: clusterResourceWhitelist:
# Broad allow; some Argo CD builds still reject certain cluster kinds unless named explicitly.
- group: "*" - group: "*"
kind: "*" kind: "*"
- group: admissionregistration.k8s.io
kind: MutatingWebhookConfiguration
- group: admissionregistration.k8s.io
kind: ValidatingWebhookConfiguration
- group: apiextensions.k8s.io
kind: CustomResourceDefinition
- group: rbac.authorization.k8s.io
kind: ClusterRole
- group: rbac.authorization.k8s.io
kind: ClusterRoleBinding
namespaceResourceWhitelist: namespaceResourceWhitelist:
- group: "*" - group: "*"
kind: "*" kind: "*"