- Add trivy-ui as separate ArgoCD Application with inline values - Create ingress.yaml for trivy0213.kro.kr - Update kustomization.yaml to include ingress
112 lines
2.4 KiB
YAML
112 lines
2.4 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: trivy
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
sources:
|
|
- repoURL: https://aquasecurity.github.io/helm-charts
|
|
chart: trivy-operator
|
|
targetRevision: 0.31.0
|
|
helm:
|
|
valueFiles:
|
|
- $values/trivy/helm-values.yaml
|
|
- repoURL: https://github.com/Mayne0213/monitoring.git
|
|
targetRevision: main
|
|
ref: values
|
|
- repoURL: https://github.com/Mayne0213/monitoring.git
|
|
targetRevision: main
|
|
path: trivy
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: trivy-system
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- PrunePropagationPolicy=foreground
|
|
- PruneLast=true
|
|
retry:
|
|
limit: 5
|
|
backoff:
|
|
duration: 5s
|
|
factor: 2
|
|
maxDuration: 3m
|
|
managedNamespaceMetadata:
|
|
labels:
|
|
goldilocks.fairwinds.com/enabled: 'true'
|
|
revisionHistoryLimit: 10
|
|
---
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: trivy-ui
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: https://locustbaby.github.io/trivy-ui/
|
|
chart: trivy-ui
|
|
targetRevision: '*'
|
|
helm:
|
|
values: |
|
|
replicaCount: 1
|
|
|
|
image:
|
|
repository: locustbaby/trivy-ui
|
|
pullPolicy: IfNotPresent
|
|
tag: "v0.0.2"
|
|
|
|
serviceAccount:
|
|
create: true
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 80
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
limits:
|
|
memory: 128Mi
|
|
|
|
env:
|
|
KUBECONFIG_DIR: "/kubeconfigs"
|
|
STATIC_PATH: "trivy-dashboard/dist"
|
|
DEBUG: "false"
|
|
|
|
kubeconfigs:
|
|
create: false
|
|
|
|
rbac:
|
|
create: true
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: trivy-system
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- PrunePropagationPolicy=foreground
|
|
- PruneLast=true
|
|
retry:
|
|
limit: 5
|
|
backoff:
|
|
duration: 5s
|
|
factor: 2
|
|
maxDuration: 3m
|
|
managedNamespaceMetadata:
|
|
labels:
|
|
goldilocks.fairwinds.com/enabled: 'true'
|
|
revisionHistoryLimit: 10
|