| Application |
ArgoCD custom resource defining a deployment: source repo, chart path, values, destination cluster/namespace. |
| AppProject |
ArgoCD custom resource defining RBAC: which repos and namespaces a team's Applications may use. sre and sec are the two projects in this repo. |
| App-of-Applications |
Pattern where a parent Application renders child Applications via a Helm chart. Used throughout this repo. |
| Incubator |
The parent Application YAML (incubator/<env>/<cluster>.yaml) that points at the generic chart + values file. One per cluster. |
| Generic chart |
generic-argo-apps-chart/ — Helm chart whose template generates one ArgoCD Application per appSpec[] entry. |
| Values file |
values/<env>/<cluster>-values.yaml — defines clusterSpec, argocdSpec, teamSpec, and appSpec[] for a cluster. |
| appSpec |
The list of tools to deploy on a cluster. The primary editing surface in this repo. |
| chartDir |
The chart directory name under devops-infra-helm-charts/helm-templates/. Must exist before referencing. |
| valuesDir |
The override directory name under devops-infra-helm-charts/helm-overrides/<cluster>/. Must contain custom-values.yaml. |
| mungedCluster |
The shortened cluster name segment used in Application names (e.g. k8s-central-prd-ase1 → central-prd). |
| nameOverride |
Optional appSpec field to override the auto-generated Application name. Use only for collisions or >253-char names. |
| ExternalName service |
Kubernetes service type used for cross-cluster DNS routing in the external-name-service-* directories (MCS topology). |
| Layer 1-T |
Tool-Mediated: agent generates YAML diff and opens PR; human reviews and merges. |
| Layer 3 |
Blocked: agent must refuse and explain why. |
