apiVersion: v1
kind: Namespace
metadata:
  name: trivy-system
  annotations:
    argocd.argoproj.io/sync-wave: "-1"
---

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: trivy-operator
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "0"
  labels:
    app.kubernetes.io/name: trivy-operator
    app.kubernetes.io/part-of: platform
    app.kubernetes.io/managed-by: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default

  source:
    repoURL: https://aquasecurity.github.io/helm-charts
    chart: trivy-operator
    targetRevision: 0.31.0
    helm:
      releaseName: trivy-operator
      valuesObject:
        operator:
          targetNamespaces: ""
          excludeNamespaces: "argocd,trivy-system,kube-system,monitoring,kyverno,cert-manager"
          scanJobsInSameNamespace: true
          metricsVulnIdEnabled: true
          metricsImageInfo: true
        trivy:
          ignoreUnfixed: false

  destination:
    server: https://kubernetes.default.svc
    namespace: trivy-system

  syncPolicy:
    automated:
      prune: true
      selfHeal: true
      allowEmpty: false
    syncOptions:
    - CreateNamespace=true
    - Validate=true
    - ServerSideApply=true
    retry:
      limit: 5
      backoff:
        duration: 5s
        factor: 2
        maxDuration: 3m

  ignoreDifferences:
  - group: apiextensions.k8s.io
    kind: CustomResourceDefinition
    jsonPointers:
    - /metadata/labels
    - /metadata/annotations
    - /metadata/finalizers