Kargo Spec

apiVersion: kargo.akuity.io/v1alpha1
kind: Kargo
metadata:
  name: test
spec:
  description: test-description
  # only set one of fqdn and subdomain
  fqdn: test.akuity.kargo.io
  subdomain: ""
  kargoInstanceSpec:
    agentCustomizationDefaults:
      kustomization:
        apiVersion: kustomize.config.k8s.io/v1beta1
        images:
        - name: ghcr.io/akuity/kargo
          newName: quay.io/fake/kargo
        - name: quay.io/akuityio/argo-rollouts
          newName: quay.io/fake/argo-rollouts
        - name: quay.io/akuity/agent
          newName: quay.io/fake/agent
        kind: Kustomization
    backendIpAllowListEnabled: true
    globalCredentialsNs:
    - test1
    - test2
    globalServiceAccountNs:
    - test3
    - test4
    ipAllowList:
    - description: test-ip
      ip: 77.77.77.77
    - description: test ip
      ip: 88.88.88.88
  oidcConfig:
    enabled: true
    dexEnabled: true
    # dexConfig should be set only if dexEnabled is true
    dexConfig: |
      connectors:
      # GitHub example
      - type: github
        id: github
        name: GitHub
        config:
          clientID: aabbccddeeff00112233
          clientSecret: $GITHUB_CLIENT_SECRET
          orgs:
            - name: your-github-org
              teams:
              - red-team
    adminAccount:
      claims:
        email:
          values:
          - admin@akuity.io
        groups:
          values:
          - admin-group@akuity.io
        sub:
          values:
          - admin-sub@akuity.io
    viewerAccount:
      claims:
        email:
          values:
          - viewer@akuity.io
        groups:
          values:
          - viewer-group@akuity.io
        sub:
          values:
          - viewer-sub@akuity.io
    # cliClientId, clientId, dexConfigSecret, additionalScopes, issuerUrl are oidc configs, and should be set only if dexEnabled is false
    cliClientId: ""
    clientId: ""
    dexConfigSecret: null
    additionalScopes: null
    issuerUrl: ""
  version: v1.1.1