Ability to ignore entire resources from Application config

[etsauer]

I have an Application that manages applies a helm chart containing a Tekton Pipeline. It looks something like this:

---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: api-pipeline
  namespace: developer-gitops
spec:
  destination:
    namespace: myapi
    server: https://kubernetes.default.svc
  project: default
  source:
    path: .
    repoURL: https://git.example.com/myapi/pipeline.git
    targetRevision: main
  syncPolicy:
    automated:
      selfHeal: true

When I create the application and allow it to sync, everything looks good, but each time I start the pipeline, resources are generated by tekton (PipelineRuns, TaskRuns, Pods) all of which have the labels propigated. When that happens, the Application then reports out of sync. I've been trying to mess with the Compare Options and Diffing Customizations, but neither of them quite give me what I need. The argocd.argoproj.io/compare-options: IgnoreExtraneous annotation works in theory, but in practice, I have no mechanism to ensure that Tekton will apply it to the right resources. The .spec.IgnoreDifferences settings only seem to work inside of a resource, not on an entire resource.

What I'm looking for is a way to configure the Application to be able to ignoreResources using a label selector. Does this exist? If not, is there another way to accomplish this that I'm not thinking of, or is a feature request appropriate?

[wanghong230]

Good question. I am trying to understand why label selector will work while annotation won't? Will you be able to inject the proper label to all the to-be-ignored objects?

[wanghong230]

I am still exploring the possible current solution. Will a custom health script be helpful? You can always mark them healthy with the group and kind. https://argoproj.github.io/argo-cd/operator-manual/health/

[wanghong230]

Another doc: https://argoproj.github.io/argo-cd/operator-manual/declarative-setup/#resource-exclusioninclusion

[etsauer]

@wanghong230 regarding application health, my understanding is that "health" and "sync status" are two different things, and I am trying to solve for sync status.

As for the second link, yes the resources exclusion/inclusion is the type of functionality I'm looking for, but that configmap configures this for the entire argocd instance. I want to give the application developers the ability to control this on their specific Applications

[etsauer]

@wanghong230 should I move this to an RFE?

[maxisam]

Do we have a solution for this? strimzi operator has this issue, somehow it doesn't create pvc until later