Argo CD — optional applications (non-bootstrap)
Base cluster configuration (CNI, MetalLB, ingress, cert-manager, storage, observability stack, policy, Vault, etc.) is installed by ansible/playbooks/noble.yml from clusters/noble/bootstrap/ — not from here.
noble-root (clusters/noble/bootstrap/argocd/root-application.yaml) points at clusters/noble/apps. Add Application manifests (and optional AppProject definitions) under this directory only for workloads that are additive and do not subsume the Ansible-managed platform.
For an app-of-apps pattern, use a second-level Application that syncs a subdirectory (for example optional/) containing leaf Application resources.