Add docs and group exclusions

Signed-off-by: Alexandre Gaudreault <[email protected]>

manifests/base/config/argocd-cm.yaml

@@ -12,26 +12,34 @@ data:
   # This list contains high volume and  high churn metadata objects which we exclude for performance
   # reasons, reducing connections and load to the K8s API servers of managed clusters.
   resource.exclusions: |
+    ### Network resources created by the Kubernetes control plane and excluded to reduce the number of watched events and UI clutter
     - apiGroups:
       - ''
+      - discovery.k8s.io
       kinds:
       - Endpoints
+      - EndpointSlice
+    ### Internal Kubernetes resources excluded reduce the number of watched events
     - apiGroups:
       - apiregistration.k8s.io
       kinds:
       - APIService
     - apiGroups:
-      - authentication.k8s.io
+      - coordination.k8s.io
       kinds:
-      - SelfSubjectReview
-      - TokenReview
+      - Lease
+    ### Internal Kubernetes Authz/Authn resources excluded reduce the number of watched events
     - apiGroups:
+      - authentication.k8s.io
       - authorization.k8s.io
       kinds:
+      - SelfSubjectReview
+      - TokenReview
       - LocalSubjectAccessReview
       - SelfSubjectAccessReview
       - SelfSubjectRulesReview
       - SubjectAccessReview
+    ### Intermediate Certificate Request excluded reduce the number of watched events
     - apiGroups:
       - certificates.k8s.io
       kinds:
@@ -40,20 +48,14 @@ data:
       - cert-manager.io
       kinds:
       - CertificateRequest
-    - apiGroups:
-      - coordination.k8s.io
-      kinds:
-      - Lease
-    - apiGroups:
-      - discovery.k8s.io
-      kinds:
-      - EndpointSlice
+    ### Cilium internal resources excluded reduce the number of watched events and UI Clutter
     - apiGroups:
       - cilium.io
       kinds:
       - CiliumIdentity
       - CiliumEndpoint
       - CiliumEndpointSlice
+    ### Kyverno intermediate and reporting resources excluded reduce the number of watched events and improve performance
     - apiGroups:
       - kyverno.io
       - reports.kyverno.io