feat: allow excluding ArgoCD and Flux resources from Zarf Agent mutation - #5224
Open
colinlodter wants to merge 4 commits into
Open
feat: allow excluding ArgoCD and Flux resources from Zarf Agent mutation#5224colinlodter wants to merge 4 commits into
colinlodter wants to merge 4 commits into
Conversation
✅ Deploy Preview for zarf-docs canceled.
|
colinlodter
force-pushed
the
5184_mutation_exclusions
branch
from
August 14, 2026 15:09
4af2c05 to
e5d5c65
Compare
Signed-off-by: Colin Lodter <colin@defenseunicorns.com>
Signed-off-by: Colin Lodter <colin@defenseunicorns.com>
…4.3 (zarf-dev#5221) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Colin Lodter <colin@defenseunicorns.com>
colinlodter
force-pushed
the
5184_mutation_exclusions
branch
from
August 14, 2026 15:42
3778358 to
73b164d
Compare
AustinAbro321
requested changes
Aug 14, 2026
AustinAbro321
left a comment
AustinAbro321
left a comment
Member
There was a problem hiding this comment.
Implementation looks good thanks! One small docs request
| - `flux` — excludes GitRepository, OCIRepository, and HelmRepository resources. | ||
| - `argocd` — excludes Application, ApplicationSet, repository and repo-creds Secrets, and AppProject resources. | ||
|
|
||
| Excluding the Argo CD or Flux resource group does not disable Pod mutation for workloads created by that controller. |
Member
There was a problem hiding this comment.
Suggested change
| Excluding the Argo CD or Flux resource group does not disable Pod mutation for workloads created by that controller. |
nit: delete for brevity, unlikely anyone mistakes this
Codecov Report✅ All modified and coverable lines are covered by tests. 🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Adds a configurable YAML list for excluding Argo CD and Flux resources from Zarf Agent mutation.
The
AGENT_MUTATION_EXCLUSIONSZarf package variable is passed to the agent Helm chart asmutationExclusions. When configured, the chart omits the corresponding mutating webhook entries:argocdexcludes Applications, ApplicationSets, repository and repo-creds Secrets, and AppProjects.fluxexcludes GitRepositories, OCIRepositories, and HelmRepositories.Pod mutation remains enabled regardless of these exclusions. When the list is empty, the agent retains its existing behavior and creates all webhooks.
Related Issue
Fixes #5184
Checklist before merging