All 29 Applications questions
More in Applications
What is selfHeal and when should you use it? How do you pin an Application to a specific Git revision or tag? What are ignoreDifferences and why are they needed? How does ArgoCD track which resources belong to an Application? How do you handle resources that ArgoCD should create but not manage/delete? How do you set an Application to auto-create its target namespace? How do Application parameters differ between Helm and Kustomize sources? How do you temporarily pause management of an Application? How do you view an Application's sync history and roll back to a prior revision? What are ApplicationSets and what problem do they solve?
Advertisement
Back to results for “Multi-cluster”
ArgoCD › Applications

What is a Project (AppProject) in ArgoCD?

Intermediate

Answer

An AppProject groups Applications and enforces guardrails: which source repos are allowed, which destination clusters/namespaces apps can deploy to, and which resource kinds are permitted (allow/deny lists). Projects provide multi-tenancy boundaries and are the basis for scoping RBAC, limiting blast radius per team.
kind: AppProject
spec:
  sourceRepos: ['https://github.com/org/*']
  destinations:
    - server: https://kubernetes.default.svc
      namespace: 'team-a-*'
Real-world example Team A's project restricts them to their repos and team-a-* namespaces, so they can't deploy elsewhere.

Common follow-ups: What can a Project restrict? | How do Projects relate to RBAC?

RBAC Multi-cluster Applications
All 29 Applications questions