Argo CD

KICK can gate restarts on Argo CD ownership, sync state, and AppProject sync windows.

Minimal policy

apiVersion: kick.corewire.io/v1alpha1
kind: KickPolicy
metadata:
  name: default
  namespace: team-a
spec:
  discovery:
    workloadSelector: {}
  gitOps:
    provider: ArgoCD

Proof: provider contract and fields in KickPolicy reference.

Ownership resolution order

1. Tracking annotation on workload: argocd.argoproj.io/tracking-id.
2. Fallback owner search when annotation is missing or invalid.
3. Block if owner is missing or ambiguous.

Proof scenarios:

• Annotation owner in Argo CD namespace: KICK-E2E-024
• Annotation owner in other namespace: KICK-E2E-025
• Invalid annotation fallback: KICK-E2E-026
• No owner blocks: KICK-E2E-028
• Multiple owners block: KICK-E2E-029

Gate checks

• Application sync state: waits while OutOfSync or actively syncing.
• AppProject sync windows: restart only when window allows.

Proof scenarios:

• Open window allows restart: KICK-E2E-032
• Closed/deny windows wait: KICK-E2E-033, KICK-E2E-034
• OutOfSync/syncing waits: KICK-E2E-037, KICK-E2E-038

Feature mapping

• Provider-neutral gate: KICK-FEAT-008
• Argo owner + fallback + ambiguity: KICK-FEAT-009, KICK-FEAT-010
• AppProject windows + sync wait: KICK-FEAT-012, KICK-FEAT-013