Add the trivy-system namespace to the allowlist

charts/argocd-config/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: argocd-config
 description: Chart to deploy ArgoCD configuration (including the argocd-apps chart)
 type: application
-version: 2.1.4
+version: 2.1.5
 appVersion: "1.0"
 maintainers:
   - name: WBstack

charts/argocd-config/templates/namespaces.yaml

@@ -0,0 +1,8 @@
+# Remember to add the namespace to the projects.yaml too, we have a very restrictive list.
+# It could be argued that this file (or files) belongs in argocd-apps/templates but that would
+# require a lot more version bumps and if we're referencing it in the projects.yaml, it has a
+# more-than-tenuous reason to be here.
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: trivy-system

charts/argocd-config/templates/projects.yaml

@@ -14,6 +14,9 @@ spec:
   - name: in-cluster-argocd
     namespace: argocd
     server: https://kubernetes.default.svc
+  - name: in-cluster-trivy-system
+    namespace: trivy-system
+    server: https://kubernetes.default.svc
   sourceRepos:
   - {{ .Values.repoUrls.deploy }}
   - {{ .Values.repoUrls.wbstack }}