From 8fa2cb558eca217d837556c5d72d44e5d9b84262 Mon Sep 17 00:00:00 2001 From: Jeffrey Smeets Date: Sat, 29 Aug 2026 18:00:35 +0200 Subject: [PATCH] infisical: ignore the volumeClaimTemplate fields argocd cannot reconcile A StatefulSet's volumeClaimTemplates are immutable, and the API server injects creationTimestamp, volumeMode and a status block that are not in the manifest. ArgoCD diffed those and reported OutOfSync permanently, since no sync could ever resolve them. infisical-postgres and infisical-valkey are the only StatefulSets here using volumeClaimTemplates, which is why this app alone was affected. --- .../argocd/applications/infisical-application.yaml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/infra/argocd/applications/infisical-application.yaml b/infra/argocd/applications/infisical-application.yaml index 7db4b4d..13a536a 100644 --- a/infra/argocd/applications/infisical-application.yaml +++ b/infra/argocd/applications/infisical-application.yaml @@ -17,6 +17,19 @@ spec: destination: server: https://kubernetes.default.svc namespace: infisical + # A StatefulSet's volumeClaimTemplates are immutable, and the API server + # injects fields into them that are not in the manifest (creationTimestamp, + # volumeMode, a status block). ArgoCD diffs those and reports OutOfSync + # forever, since syncing can never resolve them. infisical-postgres and + # infisical-valkey are the only StatefulSets here using volumeClaimTemplates, + # which is why this app alone was affected. + ignoreDifferences: + - group: apps + kind: StatefulSet + jqPathExpressions: + - '.spec.volumeClaimTemplates[]?.metadata.creationTimestamp' + - '.spec.volumeClaimTemplates[]?.spec.volumeMode' + - '.spec.volumeClaimTemplates[]?.status' syncPolicy: automated: prune: true