# 生产建议：用 AppProject 限制「能同步哪些 Git 仓 / 哪些集群 / 哪些 NS」
apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: gpu-infer
  namespace: argocd
spec:
  description: GPU 推理工作负载 GitOps 项目
  sourceRepos:
    - https://gitlab.example.local/ai-platform/*
    - https://gitlab.example.local/ai-platform/gpu-infer-manifests.git
  destinations:
    - namespace: gpu-infer
      server: https://kubernetes.default.svc
    - namespace: gpu-infer-*
      server: https://kubernetes.default.svc
  clusterResourceWhitelist:
    - group: ""
      kind: Namespace
  namespaceResourceWhitelist:
    - group: apps
      kind: Deployment
    - group: ""
      kind: Service
    - group: networking.k8s.io
      kind: Ingress