From f40cc2a8b6bbf217ae4d515d346430b4dc004b04 Mon Sep 17 00:00:00 2001
From: Alex Lay <alexander.lay@stfc.ac.uk>
Date: Mon, 22 Jun 2026 16:15:46 +0100
Subject: [PATCH] Add non sensitive prod config for argocd

---
 argocd/management-prod/argocd/app.yaml        | 26 +++++++++++++++++++
 .../argocd/overlays/prod/argocd-ingress.yaml  | 24 +++++++++++++++++
 .../argocd/overlays/prod/kustomization.yaml   | 14 ++++++++++
 3 files changed, 64 insertions(+)
 create mode 100644 argocd/management-prod/argocd/app.yaml
 create mode 100644 components/infra/argocd/overlays/prod/argocd-ingress.yaml
 create mode 100644 components/infra/argocd/overlays/prod/kustomization.yaml

diff --git a/argocd/management-prod/argocd/app.yaml b/argocd/management-prod/argocd/app.yaml
new file mode 100644
index 00000000..1467ffb5
--- /dev/null
+++ b/argocd/management-prod/argocd/app.yaml
@@ -0,0 +1,26 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: argocd
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
+spec:
+  project: infrastructure-project
+  source:
+    - repoURL: 'https://github.com/isisbusapps/gitops'
+      targetRevision: main
+      path: components/infra/argocd/overlays/prod
+    - repoURL: 'https://git.developers.facilities.rl.ac.uk/isisbusapps/BisAppSettings'
+      targetRevision: master
+      path: secret-config/prod/argocd
+  destination:
+    namespace: argocd
+    server: https://kubernetes.default.svc
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true
diff --git a/components/infra/argocd/overlays/prod/argocd-ingress.yaml b/components/infra/argocd/overlays/prod/argocd-ingress.yaml
new file mode 100644
index 00000000..3769a51e
--- /dev/null
+++ b/components/infra/argocd/overlays/prod/argocd-ingress.yaml
@@ -0,0 +1,24 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: argocd-server-ingress
+  namespace: argocd
+  annotations:
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+      - "argocd.developers.facilities.rl.ac.uk"
+    secretName: developers-tls-certificate
+  rules:
+  - host: "argocd.developers.facilities.rl.ac.uk"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: argocd-server
+            port:
+              name: https
\ No newline at end of file
diff --git a/components/infra/argocd/overlays/prod/kustomization.yaml b/components/infra/argocd/overlays/prod/kustomization.yaml
new file mode 100644
index 00000000..5869ce6e
--- /dev/null
+++ b/components/infra/argocd/overlays/prod/kustomization.yaml
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: argocd
+
+resources:
+- ../../base
+- argocd-ingress.yaml
+
+configMapGenerator:
+  - name: argocd-cm
+    behavior: merge
+    literals:
+      - url=https://argocd.developers.facilities.rl.ac.uk