# argocd

GitOps source for the cluster Argo CD installation. This app is self-managed by
Argo CD and intentionally uses a conservative sync policy.

## Current deployment

- Bootstrap: `enabled: true`, applied from `main`
- Argo application: `argocd-production`
- Target namespace: `argocd`
- Render path: `manifest/overlays/production`
- Repo URL used by Argo CD: `http://gitea-ha-http.apps:3000/olb42/argocd.git`
- Config management plugin: `ksops`

## Runtime

The base installs upstream Argo CD `v3.3.6` from the official install manifest.
The production overlay adds the Traefik route for `argocd.olb42.com`, KSOPS CMP
configuration, repo credentials, notifications, Redis credentials, and patches
for Argo CD config, RBAC, command parameters, repo-server behavior, and bundled
Redis disablement.

## Sync policy

Automated sync is disabled for the Argo CD application itself. Prune and
self-heal are also disabled so a bad self-management change cannot remove the
control plane that would be needed to repair it.