Files
security/trivy/argocd.yaml
Mayne0213 95c756bc7f FEAT(trivy): add trivy-ui Application with ingress
- Add trivy-ui as separate ArgoCD Application with inline values
- Create ingress.yaml for trivy0213.kro.kr
- Update kustomization.yaml to include ingress
2026-01-04 23:41:39 +09:00

112 lines
2.4 KiB
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: trivy
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: default
sources:
- repoURL: https://aquasecurity.github.io/helm-charts
chart: trivy-operator
targetRevision: 0.31.0
helm:
valueFiles:
- $values/trivy/helm-values.yaml
- repoURL: https://github.com/Mayne0213/monitoring.git
targetRevision: main
ref: values
- repoURL: https://github.com/Mayne0213/monitoring.git
targetRevision: main
path: trivy
destination:
server: https://kubernetes.default.svc
namespace: trivy-system
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
- PrunePropagationPolicy=foreground
- PruneLast=true
retry:
limit: 5
backoff:
duration: 5s
factor: 2
maxDuration: 3m
managedNamespaceMetadata:
labels:
goldilocks.fairwinds.com/enabled: 'true'
revisionHistoryLimit: 10
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: trivy-ui
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: default
source:
repoURL: https://locustbaby.github.io/trivy-ui/
chart: trivy-ui
targetRevision: '*'
helm:
values: |
replicaCount: 1
image:
repository: locustbaby/trivy-ui
pullPolicy: IfNotPresent
tag: "v0.0.2"
serviceAccount:
create: true
service:
type: ClusterIP
port: 80
resources:
requests:
cpu: 50m
memory: 64Mi
limits:
memory: 128Mi
env:
KUBECONFIG_DIR: "/kubeconfigs"
STATIC_PATH: "trivy-dashboard/dist"
DEBUG: "false"
kubeconfigs:
create: false
rbac:
create: true
destination:
server: https://kubernetes.default.svc
namespace: trivy-system
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
- PrunePropagationPolicy=foreground
- PruneLast=true
retry:
limit: 5
backoff:
duration: 5s
factor: 2
maxDuration: 3m
managedNamespaceMetadata:
labels:
goldilocks.fairwinds.com/enabled: 'true'
revisionHistoryLimit: 10