coulomb/railiance-platform
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add ArgoCD GitOps bootstrap contract for railiance01

Browse source 
Define platform-owned AppProjects, root app-of-apps, repository registration
templates, and tenant onboarding docs so issue-core can deploy via ArgoCD.
Ignore encrypted repository secrets locally and cross-link OpenBao delivery
guidance with the new GitOps contract.
This commit is contained in:
tegwick 2026-06-19 21:05:12 +02:00
parent cb45f29fb2
commit 64d7c18c3f
13 changed files with 655 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

23
argocd/repositories/README.md Normal file
View file

@ -0,0 +1,23 @@
# ArgoCD Repository Registration
ArgoCD discovers Git repositories from Kubernetes Secrets in the `argocd`
namespace with `argocd.argoproj.io/secret-type: repository`.
Use the templates in this directory to create SOPS-encrypted, non-plaintext
repository Secret files. Credentials must be sourced from the approved
operator/OpenBao path and must never be committed in plaintext.
Recommended OpenBao path:
```text
platform/operators/argocd/repositories/<repo-name>
```
After creating an encrypted file such as
`argocd/repositories/railiance-platform.repository.sops.yaml`, apply it with:
```bash
ARGOCD_REPOSITORY_SECRET=argocd/repositories/railiance-platform.repository.sops.yaml \
make argocd-repo-apply
```