# Bootstrap app-of-apps leaf: Trivy Operator Dashboard (web UI for vulnerability/config CRDs).
# OAuth at the edge: Traefik ForwardAuth → oauth2-proxy (OIDC with Authentik); see **trivy/dashboard-values.yaml**.
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: noble-trivy-dashboard
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io/background
spec:
  project: default
  sources:
    - repoURL: oci://ghcr.io/raoulx24/charts/trivy-operator-dashboard
      targetRevision: 1.8.0
      helm:
        releaseName: trivy-operator-dashboard
        valueFiles:
          - $values/clusters/noble/bootstrap/trivy/dashboard-values.yaml
    - repoURL: https://gitea.pcenicni.ca/gsdavidp/home-server.git
      targetRevision: HEAD
      ref: values
  destination:
    server: https://kubernetes.default.svc
    namespace: trivy-system
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true