Create ekeefe-sandbox project

Author: enkeefe00

components/kargo/internal-staging/projects/ekeefe-sandbox/external-secrets/kustomization.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - repo-credentials-es.yaml

components/kargo/internal-staging/projects/ekeefe-sandbox/external-secrets/repo-credentials-es.yaml

@@ -0,0 +1,25 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: ekeefe-sandbox-external-secret
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  dataFrom:
+    - extract:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: staging/infrastructure/ekeefe-sandbox
+  refreshInterval: 15m
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: appsre-stonesoup-vault
+  target:
+    creationPolicy: Owner
+    deletionPolicy: Delete
+    name: ekeefe-sandbox-external-secret
+    template:
+      metadata:
+        labels:
+          kargo.akuity.io/cred-type: git

components/kargo/internal-staging/projects/ekeefe-sandbox/kustomization.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+  - rbac
+  - external-secrets
+
+replacements:
+  - source:
+      kind: Namespace
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Project
+        fieldPaths:
+          - metadata.name
+
+namespace: ekeefe-sandbox

components/kargo/internal-staging/projects/ekeefe-sandbox/manifest-wh.yaml

@@ -0,0 +1,13 @@
+apiVersion: kargo.akuity.io/v1alpha1
+kind: Warehouse
+metadata:
+  name: infra-deployments-manifest-wh
+  namespace: ekeefe-sandbox
+spec:
+  subscriptions:
+  - git:
+      repoURL: https://github.com/enkeefe00/infra-deployments
+      commitSelectionStrategy: NewestFromBranch
+      branch: setup-ring-overlays
+      includePaths:
+        - 'components/**/kargo'

components/kargo/internal-staging/projects/ekeefe-sandbox/rbac/kargo-permissions-rb.yaml

@@ -0,0 +1,41 @@
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: ekeefe-sandbox-kargo-resources-admin
+rules:
+  - apiGroups:
+      - kargo.akuity.io
+    resources:
+      - "*"
+    verbs:
+      - "*"
+  - apiGroups:
+      - external-secrets.io
+    resources:
+      - externalsecrets
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs:
+      - get
+      - list
+      - watch
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: ekeefe-sandbox-kargo-resources-admin
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: User
+    name: ekeefe
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ekeefe-sandbox-kargo-resources-admin

components/kargo/internal-staging/projects/ekeefe-sandbox/rbac/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - kargo-permissions-rb.yaml