argocd

GitOps source for the cluster Argo CD installation. This app is self-managed by Argo CD and intentionally uses a conservative sync policy.

Current deployment

• Bootstrap: enabled: true, applied from main
• Argo application: argocd-production
• Target namespace: argocd
• Render path: manifest/overlays/production
• Repo URL used by Argo CD: http://gitea-ha-http.apps:3000/olb42/argocd.git
• Config management plugin: ksops

Runtime

The base installs upstream Argo CD v3.3.6 from the official install manifest. The production overlay adds the Traefik route for argocd.olb42.com, KSOPS CMP configuration, repo credentials, notifications, Redis credentials, and patches for Argo CD config, RBAC, command parameters, repo-server behavior, and bundled Redis disablement.

Sync policy

Automated sync is disabled for the Argo CD application itself. Prune and self-heal are also disabled so a bad self-management change cannot remove the control plane that would be needed to repair it.