add upgrade doc

Signed-off-by: Alexandre Gaudreault <[email protected]>
agaudreault · Jan 22, 2025 · 7af73d1 · 7af73d1
1 parent 6d3c5f2
commit 7af73d1
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 1 deletion.
diff --git a/docs/operator-manual/upgrading/2.14-3.0.md b/docs/operator-manual/upgrading/2.14-3.0.md
@@ -22,3 +22,20 @@ The v2 behavior can be preserved by setting the config value `server.rbac.disabl
 to `false` in the Argo CD ConfigMap `argocd-cm`.
 
 Read the [RBAC documentation](../rbac.md#fine-grained-permissions-for-updatedelete-action) for more detailed inforamtion.
+
+### Default `resource.exclusions` configurations
+
+Argo CD manifest now contains a default configuration for `resource.exclusions` in the `argocd-cm` to exclude resources that
+are known to be created by controller and not usually managed in Git. The exclusions contains high volume and high churn objects
+which we exclude for performance reasons, reducing connections and load to the K8s API servers of managed clusters.
+
+The excluded Kind are:
+
+- **Kubernetes Resources**: `Endpoints`, `EndpointSlice`, `APIService`, `Lease`, `SelfSubjectReview`, `TokenReview`, `LocalSubjectAccessReview`, `SelfSubjectAccessReview`, `SelfSubjectRulesReview`, `SubjectAccessReview`, `CertificateSigningRequest`, `PolicyReport` and `ClusterPolicyReport`.
+- **Cert Manager**: `CertificateRequest`
+- **Kynerno**: `EphemeralReport`, `ClusterEphemeralReport`, `AdmissionReport`, `ClusterAdmissionReport`, `BackgroundScanReport`, `ClusterBackgroundScanReport` and `UpdateRequest`.
+- **Cilium**: `CiliumIdentity`, `CiliumEndpoint` and `CiliumEndpointSlice`.
+
+The default `resource.exclusions` can be overridden or removed in the configMap to preserve the v2 behavior.
+
+Read the [Declarative Setup](../declarative-setup.md) for more detailed information to configre `resource.exclusions`.
diff --git a/manifests/base/config/argocd-cm.yaml b/manifests/base/config/argocd-cm.yaml
@@ -59,7 +59,12 @@ data:
       - reports.kyverno.io
       - wgpolicyk8s.io
       kinds:
-      - ClusterPolicyReport
       - PolicyReport
+      - ClusterPolicyReport
       - EphemeralReport
+      - ClusterEphemeralReport
+      - AdmissionReport
+      - ClusterAdmissionReport
+      - BackgroundScanReport
+      - ClusterBackgroundScanReport
       - UpdateRequest