Scooby HuskyandClaude Opus 4.6 131cbca4a6 Fix ArgoCD ServerSideDiff permanent OutOfSync diffs ...

Add explicit CRD/API defaults to manifests that were causing ArgoCD's
SSA dry-run to produce results different from live state:

- HTTPRoutes: add group, kind, weight defaults to parentRefs/backendRefs
- Kyverno ClusterPolicies: add skipBackgroundRequests, allowExistingViolations
- Tetragon TracingPolicies: add return, maxData, resolve, returnCopy defaults
- Gateway certificateRefs: add group="" default
- Guacamole Gateway: add group="" to certificateRefs

Add ignoreDifferences for resources that legitimately differ:
- Cilium cert Secrets (auto-generated, data always differs)
- Istio ValidatingWebhookConfiguration failurePolicy (istiod mutates)
- Crowdsec LAPI Secrets (randomly generated)
- ServiceMonitor/PodMonitor relabeling action defaults
- StatefulSet volumeClaimTemplates apiVersion/kind defaults

Persist argocd-cm ignoreDifferences config in ArgoCD Helm values.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-10 17:32:59 -05:00

apps

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

argocd-apps

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

charts

Fix degraded apps: add nessus to project, remove duplicate guacamole route, update prometheus CRDs to v0.89.0

2026-03-09 22:32:15 -05:00

environments

Initial commit

2026-03-09 20:21:35 -05:00

hooks

Initial commit

2026-03-09 20:21:35 -05:00

infrastructure

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

scripts

Fix degraded apps: add nessus to project, remove duplicate guacamole route, update prometheus CRDs to v0.89.0

2026-03-09 22:32:15 -05:00

.gitignore

Initial commit

2026-03-09 20:21:35 -05:00

bootstrap.yaml

Set GitLab repo URL and update ArgoCD hostAliases

2026-03-09 22:18:26 -05:00

CLAUDE.md

Initial commit

2026-03-09 20:21:35 -05:00

S

Description

No description provided

953 KiB

Languages

Shell 94%

Go Template 6%