UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

SKIP UPGRADE Blloyd argocd cypress fix

Merged Brendon Lloyd requested to merge blloyd_argocd_cypress_fix into master
Compare and Show latest version
2 files
+ 26
6
Compare changes
  • Side-by-side
  • Inline
Files
2
+ 25
5
@@ -129,13 +129,15 @@ gatekeeper:
excludedResources:
# Allows k3d load balancer containers to not drop capabilities
- istio-system/lb-port-.*
excludedNamespaces:
- argocd
allowedDockerRegistries:
parameters:
excludedResources:
# Allows k3d load balancer containers to pull from public repos
- istio-system/lb-port-.*
# Allow argocd to deploy a test app in its cypress test
- argocd/guestbook.*
- argocd/guestbook-ui.*
excludedNamespaces:
- argocd
allowedSecCompProfiles:
@@ -143,23 +145,29 @@ gatekeeper:
excludedResources:
# Allows k3d load balancer containers to have an undefined defined seccomp
- istio-system/lb-port-.*
excludedNamespaces:
- argocd
allowedUsers:
parameters:
excludedResources:
# Allows k3d load balancer containers to run as any user/group
- istio-system/lb-port-.*
excludedNamespaces:
- argocd
containerRatio:
parameters:
excludedResources:
# Allows k3d load balancer containers to have undefined limits/requests
- istio-system/lb-port-.*
excludedNamespaces:
- argocd
hostNetworking:
parameters:
excludedResources:
# Allows k3d load balancer containers to mount host ports
- istio-system/lb-port-.*
# Allow argocd to deploy a test app in its cypress test
- argocd/guestbook.*
- argocd/guestbook-ui.*
excludedNamespaces:
- argocd
noBigContainers:
@@ -167,26 +175,36 @@ gatekeeper:
excludedResources:
# Allows k3d load balancer containers to have undefined limits/requests
- istio-system/lb-port-.*
excludedNamespaces:
- argocd
noPrivilegedEscalation:
parameters:
excludedResources:
# Allows k3d load balancer containers to have undefined security context
- istio-system/lb-port-.*
excludedNamespaces:
- argocd
readOnlyRoot:
parameters:
excludedResources:
# Allows k3d load balancer containers to mount filesystems read/write
- istio-system/lb-port-.*
excludedNamespaces:
- argocd
requiredLabels:
parameters:
excludedResources:
# Allows k3d load balancer pods to not have required labels
- istio-system/svclb-.*
excludedNamespaces:
- argocd
requiredProbes:
parameters:
excludedResources:
# Allows k3d load balancer containers to not have readiness/liveness probes
- istio-system/lb-port-.*
excludedNamespaces:
- argocd
bbtests:
# TODO: Test will need to be refactored at BB level to properly run since we can't turn everything to deny
# https://repo1.dso.mil/platform-one/big-bang/apps/core/policy/-/issues/133
@@ -368,6 +386,8 @@ twistlock:
# Addons are toggled based on labels in CI
addons:
argocd:
flux:
timeout: 20m
enabled: true
sso:
enabled: false
@@ -392,15 +412,15 @@ addons:
redis-bb:
master:
persistence:
size: 256Mi
size: 512Mi
replica:
persistence:
size: 256Mi
size: 512Mi
redis:
resources:
requests:
cpu: 50m
memory: 64Mi
memory: 256Mi
limits: {}
server:
resources:
Loading