apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: agentic-os
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "0"
spec:
  description: GitOps project for Agentic OS platform and workloads
  sourceRepos:
    - "*"
  destinations:
    - namespace: "*"
      server: https://kubernetes.default.svc
  clusterResourceWhitelist:
    # Avoid group/kind "*" alone on some Argo CD 3.x builds (can block webhooks); list common cluster-scoped kinds.
    - group: admissionregistration.k8s.io
      kind: MutatingWebhookConfiguration
    - group: admissionregistration.k8s.io
      kind: ValidatingWebhookConfiguration
    - group: apiextensions.k8s.io
      kind: CustomResourceDefinition
    - group: rbac.authorization.k8s.io
      kind: ClusterRole
    - group: rbac.authorization.k8s.io
      kind: ClusterRoleBinding
    - group: rbac.authorization.k8s.io
      kind: Role
    - group: rbac.authorization.k8s.io
      kind: RoleBinding
    - group: storage.k8s.io
      kind: StorageClass
    - group: scheduling.k8s.io
      kind: PriorityClass
    - group: networking.k8s.io
      kind: IngressClass
    - group: cilium.io
      kind: CiliumClusterwideNetworkPolicy
  namespaceResourceWhitelist:
    - group: "*"
      kind: "*"