added initial istio code

charts/application_old.yaml

@@ -0,0 +1,26 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: eggnog
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://gitlab.com/nanuchi/argocd-app-config.git
+    targetRevision: HEAD
+    path: dev
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: myapp
+
+  # pulls every 3 minutes! YAY!
+  # NOTE: THESE ARE OFF BY DEFAULT!!!
+  syncPolicy:
+    syncOptions:
+      # create namespace if not found
+      - CreateNamespace=true
+    automated:
+      selfHeal: true
+
+      # yeet the local
+      prune: true

charts/istio-base.yaml

@@ -0,0 +1,27 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+    name: istio-base
+    namespace: argocd
+    finalizers:
+        - resources-finalizer.argocd.argoproj.io
+spec:
+    destination:
+        server: https://kubernetes.default.svc
+        namespace: istio-system
+    project: default
+    source:
+        chart: base
+        repoURL: https://istio-release.storage.googleapis.com/charts
+        targetRevision: ${ISTIO_VERSION}
+    syncPolicy:
+        automated:
+            prune: true
+            selfHeal: true
+        syncOptions:
+            - CreateNamespace=true
+    ignoreDifferences:
+        - group: admissionregistration.k8s.io
+          kind: ValidatingWebhookConfiguration
+          jsonPointers:
+              - /webhooks/0/failurePolicy

charts/istio-cni.yaml

@@ -0,0 +1,23 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+    name: istio-cni
+    namespace: argocd
+    finalizers:
+        - resources-finalizer.argocd.argoproj.io
+spec:
+    destination:
+        server: https://kubernetes.default.svc
+        namespace: kube-system
+    project: default
+    source:
+        chart: cni
+        repoURL: https://istio-release.storage.googleapis.com/charts
+        targetRevision: ${ISTIO_VERSION}
+        helm:
+            values: |
+                profile: ambient
+    syncPolicy:
+        automated:
+            prune: true
+            selfHeal: true

charts/istiod.yaml

@@ -0,0 +1,28 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+    name: istiod
+    namespace: argocd
+    finalizers:
+        - resources-finalizer.argocd.argoproj.io
+spec:
+    destination:
+        server: https://kubernetes.default.svc
+        namespace: istio-system
+    project: default
+    source:
+        chart: istiod
+        repoURL: https://istio-release.storage.googleapis.com/charts
+        targetRevision: ${ISTIO_VERSION}
+        helm:
+            values: |
+                profile: ambient
+    syncPolicy:
+        automated:
+            prune: true
+            selfHeal: true
+    ignoreDifferences:
+        - group: admissionregistration.k8s.io
+          kind: ValidatingWebhookConfiguration
+          jsonPointers:
+              - /webhooks/0/failurePolicy

charts/ztunnel.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+    name: istio-ztunnel
+    namespace: argocd
+    finalizers:
+        - resources-finalizer.argocd.argoproj.io
+spec:
+    destination:
+        server: https://kubernetes.default.svc
+        namespace: istio-system
+    project: default
+    source:
+        chart: ztunnel
+        repoURL: https://istio-release.storage.googleapis.com/charts
+        targetRevision: ${ISTIO_VERSION}
+    syncPolicy:
+        automated:
+            prune: true
+            selfHeal: true