diff --git a/README.md b/README.md index 83fd458..055344f 100644 --- a/README.md +++ b/README.md @@ -8,21 +8,22 @@ This is a **Kubernetes cluster bootstrapping and GitOps configuration repository . ├── bootstrap.sh # Main bootstrap script to initialize ArgoCD and cluster ├── apps/ # Application resources -│ ├── _app-of-apps.yaml # App-of-apps pattern: parent Enterprize Application that manages all enterprize apps +│ ├── _app-of-apps.yaml # App-of-apps pattern: parent Enterprise Application that manages all enterprise apps │ ├── feedback-hub.yaml # Feedback Hub test app -│ ├── musicman.yaml # Music Man hackathon app +│ └── musicman.yaml # Music Man hackathon app ├── infra/ # Individual ArgoCD Application resources for infrastructure │ ├── _app-of-apps.yaml # App-of-apps pattern: parent Infra Application that manages all infrastructure apps │ ├── traefik-application.yaml # Ingress controller (Traefik) │ ├── cert-manager-application.yaml # TLS certificate management │ ├── kyverno.yaml # Policy engine for security +│ ├── kyverno-policies.yaml # Kyverno policy definitions │ ├── prometheus.yaml # Metrics & monitoring │ ├── grafana.yaml # Monitoring visualization │ ├── loki.yaml # Log aggregation │ ├── fluent-bit.yaml # Log shipping │ ├── trivy.yaml # Container scanning │ ├── sealedsecrets.yaml # Secret encryption -│ └── cluster-resources-application.yaml # Cluster-wide resources +│ ├── cluster-resources-application.yaml # Cluster-wide resources │ └── values/ # Helm value overrides for ArgoCD and services │ ├── argocd-values.yaml # ArgoCD server configuration │ ├── prometheus-values.yaml @@ -31,8 +32,12 @@ This is a **Kubernetes cluster bootstrapping and GitOps configuration repository │ └── fluent-bit-values.yaml └── cluster-resources/ # Cluster-level configurations managed by cluster-resources-application.yaml ├── cert-manager-namespace.yaml + ├── secrets-namespace.yaml # Namespace for secrets ├── letsencrypt-issuer.yaml # TLS certificate issuer - └── kyverno-config.yaml # Security policies and secret syncing + ├── kyverno-config.yaml # Security policies and secret syncing + └── policies/ # Kyverno policy definitions + ├── deployment-verifier.yaml # Policy to verify deployments + └── label-checker.yaml # Policy to check labels ``` ## Architecture & Key Concepts