argocd: add rule for correct work with kyverno

Signed-off-by: Login Victor <batazor@evrone.com>
shortlink-org · Sep 16, 2022 · cd12cce · cd12cce
1 parent ddce69c
commit cd12cce
Show file tree

Hide file tree

Showing 17 changed files with 102 additions and 0 deletions.
diff --git a/ops/Helm/addons/argocd/templates/shortlink/infrastructure.yaml b/ops/Helm/addons/argocd/templates/shortlink/infrastructure.yaml
@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: ApplicationSet
 metadata:
   name: infrastructure
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   generators:
     - list:

diff --git a/ops/Helm/addons/argocd/templates/shortlink/knative.yaml b/ops/Helm/addons/argocd/templates/shortlink/knative.yaml
@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: ApplicationSet
 metadata:
   name: knative
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   generators:
   - list:

diff --git a/ops/Helm/addons/argocd/templates/shortlink/shortlink.yaml b/ops/Helm/addons/argocd/templates/shortlink/shortlink.yaml
@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: ApplicationSet
 metadata:
   name: shortlink
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   generators:
     - list:

diff --git a/ops/argocd/infrastructure/elasticsearch/application.yaml b/ops/argocd/infrastructure/elasticsearch/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: elasticsearch
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -41,3 +43,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/infrastructure/grafana/application.yaml b/ops/argocd/infrastructure/grafana/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: grafana
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -27,3 +29,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/infrastructure/kafka/application.yaml b/ops/argocd/infrastructure/kafka/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: kafka
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -27,3 +29,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/infrastructure/kyverno/application.yaml b/ops/argocd/infrastructure/kyverno/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: kyverno
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -27,3 +29,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/infrastructure/postgresql/application.yaml b/ops/argocd/infrastructure/postgresql/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: postgresql
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -27,3 +29,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/infrastructure/prometheus-operator/application.yaml b/ops/argocd/infrastructure/prometheus-operator/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: prometheus-operator
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -27,3 +29,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/infrastructure/rabbitmq/application.yaml b/ops/argocd/infrastructure/rabbitmq/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: rabbitmq
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -27,3 +29,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/infrastructure/redis/application.yaml b/ops/argocd/infrastructure/redis/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: redis
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -27,3 +29,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/knative/knative-eventing/application.yaml b/ops/argocd/knative/knative-eventing/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: knative-eventing
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -25,3 +27,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/knative/knative-operator/application.yaml b/ops/argocd/knative/knative-operator/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: knative-operator
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -27,3 +29,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/knative/knative-serving/application.yaml b/ops/argocd/knative/knative-serving/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: knative-serving
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -25,3 +27,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/knative/sync-kafka-to-elasticsearch/application.yaml b/ops/argocd/knative/sync-kafka-to-elasticsearch/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: sync-kafka-to-elasticsearch
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -25,3 +27,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/knative/sync-rabbitmq-to-elasticsearch/application.yaml b/ops/argocd/knative/sync-rabbitmq-to-elasticsearch/application.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: sync-rabbitmq-to-elasticsearch
   namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
 spec:
   project: shortlink
   destination:
@@ -25,3 +27,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))
diff --git a/ops/argocd/shortlink/link/application.yaml b/ops/argocd/shortlink/link/application.yaml
@@ -35,3 +35,8 @@ spec:
         duration: 10s
         maxDuration: 3m0s
         factor: 2
+  ignoreDifferences:
+    - group: kyverno.io
+      kind: ClusterPolicy
+      jqPathExpressions:
+        - .spec.rules[] | select(.name|test("autogen-."))