DEv-669: added mobene stuff inclkuding scoped restrictions - hopefully it works ... all available fingers crossed

clusterspecifics/appprojects/kustomization.yaml

@@ -1,2 +1,2 @@
-#resources:
-#- mobene.yaml
+resources:
+- mobene.yaml

clusterspecifics/appprojects/mobene.yaml

@@ -3,34 +3,26 @@ kind: AppProject
 metadata:
   name: mobene
   namespace: argo-cd
-  # Finalizer that ensures that project is not deleted until it is not referenced by any application
   finalizers:
     - resources-finalizer.argocd.argoproj.io
 spec:
-  # Project description
   description: ArgoCD project for clustering apps for mobene
 
   # Allow manifests to deploy from any Git repos
   sourceRepos:
-    - '*'
-    # - 'https://prodnso-gitea-01.smardigo.digital/argocd/prodwork01-mobene-deployment'
-    # - 'oci://prodnso-harbor-01.smardigo.digital/infrastructure'
+    - 'https://prodnso-gitea-01.smardigo.digital/argocd/prodwork01-mobene-deployment'
 
-  destinations:
-    - namespace: '*'
-      server: https://kubernetes.default.svc
+  # Deny all cluster-scoped resources from being created
   clusterResourceWhitelist:
-    - group: '*'
-      kind: '*'
-
-  # # destinations:
-  # - namespace: mobene-nsodev
-  #   server: https://kubernetes.default.svc
-  # - namespace: mobene-cusqa
-  #   server: https://kubernetes.default.svc
-  # - namespace: mobene-cusprod
-  #   server: https://kubernetes.default.svc
+    - group: ''
+      kind: ''
 
-  # clusterResourceWhitelist:
-  # - group: ''
-  #   kind: ''
+  # allowed destinations for deployments:
+  - namespace: mobene-nsodev
+    server: https://kubernetes.default.svc
+  - namespace: mobene-cusqa
+    server: https://kubernetes.default.svc
+  - namespace: mobene-cusprod
+    server: https://kubernetes.default.svc
+  - namespace: mobene-keycloak
+    server: https://kubernetes.default.svc

clusterspecifics/apps/mobene_deployment.yaml

@@ -10,7 +10,7 @@ spec:
   source:
     repoURL: https://prodnso-gitea-01.smardigo.digital/argocd/prodwork01-mobene-deployment
     targetRevision: main
-    path: mobene-apps
+    path: argo_apps
   syncPolicy:
     automated:
       prune: true