{"id":19268631,"url":"https://github.com/moolen/argo-platform-team","last_synced_at":"2026-02-28T18:35:08.373Z","repository":{"id":146316721,"uuid":"335750200","full_name":"moolen/argo-platform-team","owner":"moolen","description":null,"archived":false,"fork":false,"pushed_at":"2021-02-04T16:17:54.000Z","size":12,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-02-23T19:46:30.849Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/moolen.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-02-03T20:45:57.000Z","updated_at":"2021-02-04T16:18:42.000Z","dependencies_parsed_at":"2023-07-02T14:30:22.302Z","dependency_job_id":null,"html_url":"https://github.com/moolen/argo-platform-team","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/moolen/argo-platform-team","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fargo-platform-team","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fargo-platform-team/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fargo-platform-team/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fargo-platform-team/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moolen","download_url":"https://codeload.github.com/moolen/argo-platform-team/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fargo-platform-team/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29946870,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-28T18:21:26.597Z","status":"ssl_error","status_checked_at":"2026-02-28T18:19:38.892Z","response_time":90,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-09T20:16:52.227Z","updated_at":"2026-02-28T18:35:08.332Z","avatar_url":"https://github.com/moolen.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# argocd-multi-tenancy\n\nThis is an example multi-tenant CI/CD implementation using `ApplicationSet`. The [ApplicationSet controller](https://github.com/argoproj-labs/applicationset) is in early stage of development and some features are not yet implemented ([#30](https://github.com/argoproj-labs/applicationset/issues/30), [#114](https://github.com/argoproj-labs/applicationset/issues/114), [#106](https://github.com/argoproj-labs/applicationset/issues/106)...).\n\n## Requirements\n\n* `devs` should manage their application deployments with a `self-service` to ensure the platform teams doesn't burn out\n* platform team wants to offer an **opinionated CI/CD pipeline** and it should be **extensible** for the devs\n* tenant management is key: **enforce strong isolation between** all teams: dedicated project per team with namespace enforcment `team-a-*` / `team-b-*` and permissions.\n* one team can have **multiple apps** in **one or more namespaces**\n* one team can only access their own stuff\n* gitops for compliance \u003c3\n* application code and infra code must be in a separate repository\n\n## Implementation\n\n* `argo-platform-team` (this repo) is the platform team's area of responsibility.\n* `argo-team-X-app-Y` is a tenant repository that contains the k8s manifests.\n\n\n### Process\n\nA tenant has to register a new application in `$ENV/values.yaml`.\n\n```yaml\nteam-a:\n  name: team-a\n  project: team-a\n  repos:\n  - url: https://github.com/moolen/argo-team-a-app-1.git\n    path: \"env/dev/*\"\n    ns_prefix: team-a-app1-\n  # ...register new app...\n  - url: https://github.com/moolen/argo-team-a-app-2.git\n    path: \"env/dev/*\"\n    ns_prefix: team-a-app2-\n```\n\nOnce this is merged the `ApplicationSet` will generate a new `Application` for this repository. The Application will be assigned to `project: team-a` and underlies its namespace and role constraints. A team is not able to deploy into the `argocd` or `kube-system` namespace.\nThe dev team is free to create new stages e.g. `testing/acceptance/review` without the review of the platform team:\n\n```\nargo-team-a-app-1\n├── base\n└── env\n    ├── dev\n    │   ├── dev-foo\n    │   ├── ...add..new..stage..on..demand\n    │   └── dev-integration\n    ├── prod\n    │   └── prod\n    └── staging\n        ├── staging-bar\n        └── staging-foo\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoolen%2Fargo-platform-team","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmoolen%2Fargo-platform-team","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoolen%2Fargo-platform-team/lists"}