Argo CD: ApplicationSet, AppProject and the Applications it generates

apiVersion: v1
kind: Secret
metadata:
  name: repo-team-a-apps
  namespace: argocd
  labels:
    argocd.argoproj.io/secret-type: repository
stringData:
  type: git
  url: https://github.com/acme/team-a-apps.git
  username: argocd
  password: <read-only token>
---
apiVersion: v1
kind: Secret
metadata:
  name: cluster-prod-eu
  namespace: argocd
  labels:
    argocd.argoproj.io/secret-type: cluster
    env: prod
stringData:
  name: prod-eu
  server: https://prod-eu.k8s.example.com
  config: |
    {
      "bearerToken": "<service account token>",
      "tlsClientConfig": { "caData": "<base64 CA>" }
    }
---
apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: team-a
  namespace: argocd
spec:
  sourceRepos:
    - https://github.com/acme/team-a-apps.git
  destinations:
    - name: prod-eu
      namespace: team-a-*
  clusterResourceWhitelist: []
  namespaceResourceBlacklist:
    - group: ""
      kind: ResourceQuota
---
apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: team-a
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - git:
        repoURL: https://github.com/acme/team-a-apps.git
        revision: main
        directories:
          - path: apps/*
  template:
    metadata:
      name: "team-a-{{ .path.basename }}"
    spec:
      project: team-a
      source:
        repoURL: https://github.com/acme/team-a-apps.git
        targetRevision: main
        path: "{{ .path.path }}"
      destination:
        name: prod-eu
        namespace: "team-a-{{ .path.basename }}"
      syncPolicy:
        automated:
          prune: true
          selfHeal: true
        syncOptions:
          - CreateNamespace=true