Models

v1alpha1AppProjectSpec

object

clusterResourceBlacklistArray<v1alpha1ClusterResourceRestrictionItem>

Show child attributes

groupstring

kindstring

namestring

Name is the name of the restricted resource. Glob patterns using Go's filepath.Match syntax are supported. Unlike the group and kind fields, if no name is specified, all resources of the specified group/kind are matched.

clusterResourceWhitelistArray<v1alpha1ClusterResourceRestrictionItem>

Show child attributes

groupstring

kindstring

namestring

descriptionstring

destinationServiceAccountsArray<v1alpha1ApplicationDestinationServiceAccount>

DestinationServiceAccounts holds information about the service accounts to be impersonated for the application sync operation for each destination.

Show child attributes

ApplicationDestinationServiceAccount holds information about the service account to be impersonated for the application sync operation.

defaultServiceAccountstring

namespacestring

Namespace specifies the target namespace for the application's resources.

serverstring

Server specifies the URL of the target cluster's Kubernetes control plane API.

destinationsArray<v1alpha1ApplicationDestination>

Show child attributes

namestring

Name is an alternate way of specifying the target cluster by its symbolic name. This must be set if Server is not set.

namespacestring

serverstring

Server specifies the URL of the target cluster's Kubernetes control plane API. This must be set if Name is not set.

namespaceResourceBlacklistArray<v1GroupKind>

Show child attributes

+protobuf.options.(gogoproto.goproto_stringer)=false

groupstring

kindstring

namespaceResourceWhitelistArray<v1GroupKind>

Show child attributes

+protobuf.options.(gogoproto.goproto_stringer)=false

groupstring

kindstring

orphanedResourcesv1alpha1OrphanedResourcesMonitorSettings

Show child attributes

ignoreArray<v1alpha1OrphanedResourceKey>

Show child attributes

groupstring

kindstring

namestring

warnboolean

permitOnlyProjectScopedClustersboolean

rolesArray<v1alpha1ProjectRole>

Show child attributes

descriptionstring

groupsArray<string>

jwtTokensArray<v1alpha1JWTToken>

Show child attributes

expinteger<int64>

iatinteger<int64>

idstring

namestring

policiesArray<string>

signatureKeysArray<v1alpha1SignatureKey>

Deprecated: Use SourceIntegrity instead. SignatureKeys will be removed with the next major version.

Show child attributes

Deprecated: Use SourceIntegrity instead. SignatureKeys will be removed with the next major version.

keyIDstring

sourceIntegrityv1alpha1SourceIntegrity

Show child attributes

gitv1alpha1SourceIntegrityGit

Show child attributes

policiesArray<v1alpha1SourceIntegrityGitPolicy>

Show child attributes

gpgv1alpha1SourceIntegrityGitPolicyGPG

SourceIntegrityGitPolicyGPG verifies that the commit(s) are both correctly signed by a key in the repo-server keyring, and that they are signed by one of the key listed in Keys.

This policy can be deactivated through the ARGOCD_GPG_ENABLED environment variable.

Note the listing of problematic commits/signatures reported when "strict" mode validation fails may not be complete. This means that a user that has addressed all problems reported by source integrity check can run into further problematic signatures on a subsequent attempt. That happens namely when history contains seal commits signed with gpg keys that are in the keyring, but not listed in Keys.

Show child attributes

keysArray<string>

List of key IDs to trust. The keys need to be in the repository server keyring.

modestring

reposArray<v1alpha1SourceIntegrityGitPolicyRepo>

Show child attributes

urlstring

URL specifier, glob.

sourceNamespacesArray<string>

sourceReposArray<string>

syncWindowsArray<v1alpha1InlineSyncWindow>

Show child attributes

andOperatorboolean

applicationsArray<string>

clustersArray<string>

descriptionstring

durationstring

kindstring

manualSyncboolean

namespacesArray<string>

schedulestring

syncOverrunboolean

timeZonestring

Example

{
  "clusterResourceBlacklist": [
    {
      "group": "string",
      "kind": "string",
      "name": "string"
    }
  ],
  "clusterResourceWhitelist": [
    {
      "group": "string",
      "kind": "string",
      "name": "string"
    }
  ],
  "description": "string",
  "destinationServiceAccounts": [
    {
      "defaultServiceAccount": "string",
      "namespace": "string",
      "server": "string"
    }
  ],
  "destinations": [
    {
      "name": "string",
      "namespace": "string",
      "server": "string"
    }
  ],
  "namespaceResourceBlacklist": [
    {
      "group": "string",
      "kind": "string"
    }
  ],
  "namespaceResourceWhitelist": [
    {
      "group": "string",
      "kind": "string"
    }
  ],
  "orphanedResources": {
    "ignore": [
      {
        "group": "string",
        "kind": "string",
        "name": "string"
      }
    ],
    "warn": true
  },
  "permitOnlyProjectScopedClusters": true,
  "roles": [
    {
      "description": "string",
      "groups": [
        "string"
      ],
      "jwtTokens": [
        {
          "exp": 0,
          "iat": 0,
          "id": "string"
        }
      ],
      "name": "string",
      "policies": [
        "string"
      ]
    }
  ],
  "signatureKeys": [
    {
      "keyID": "string"
    }
  ],
  "sourceIntegrity": {
    "git": {
      "policies": [
        {
          "gpg": {
            "keys": [
              "string"
            ],
            "mode": "string"
          },
          "repos": [
            {
              "url": "string"
            }
          ]
        }
      ]
    }
  },
  "sourceNamespaces": [
    "string"
  ],
  "sourceRepos": [
    "string"
  ],
  "syncWindows": [
    {
      "andOperator": true,
      "applications": [
        "string"
      ],
      "clusters": [
        "string"
      ],
      "description": "string",
      "duration": "string",
      "kind": "string",
      "manualSync": true,
      "namespaces": [
        "string"
      ],
      "schedule": "string",
      "syncOverrun": true,
      "timeZone": "string"
    }
  ]
}

Docs by Sourcey