# ArgoCD upstream Helm chart does not set resource limits or probes on
# several components. These are audit-mode policies and ArgoCD is a
# third-party chart we don't control.
apiVersion: kyverno.io/v2
kind: PolicyException
metadata:
  name: argocd-exemption
  namespace: kyverno
spec:
  exceptions:
    - policyName: require-resource-limits
      ruleNames:
        - require-limits
        - autogen-require-limits
    - policyName: require-probes
      ruleNames:
        - require-probes
  match:
    any:
      - resources:
          kinds:
            - Deployment
            - StatefulSet
            - ReplicaSet
            - Pod
          namespaces:
            - argocd