infisical: ignore every volumeClaimTemplate field the api server injects

The earlier rule covered creationTimestamp, volumeMode and status but missed
apiVersion and kind, which the API server also injects into
volumeClaimTemplates. Those two alone kept both StatefulSets permanently
OutOfSync: a sync would apply successfully and report Synced, then the very
next comparison flagged them again.

applications/minio-aistor/minio-aistor-backendtrafficpolicy.yaml

@@ -25,5 +25,12 @@ spec:
       name: minio-aistor-api-route
   timeout:
     http:
-      connectionIdleTimeout: 3600s
+      connectionIdleTimeout: 30s
+      maxConnectionDuration: 300s
       requestTimeout: 0s
+  retry:
+    numRetries: 3
+    retryOn:
+      triggers:
+        - connect-failure
+        - reset

infra/argocd/applications/infisical-application.yaml

@@ -18,15 +18,17 @@ spec:
     server: https://kubernetes.default.svc
     namespace: infisical
   # A StatefulSet's volumeClaimTemplates are immutable, and the API server
-  # injects fields into them that are not in the manifest (creationTimestamp,
+  # injects fields into them that are not in the manifest: apiVersion, kind,
-  # volumeMode, a status block). ArgoCD diffs those and reports OutOfSync
+  # metadata.creationTimestamp, spec.volumeMode and a status block. ArgoCD
-  # forever, since syncing can never resolve them. infisical-postgres and
+  # diffs those and reports OutOfSync forever, since no sync can resolve them.
-  # infisical-valkey are the only StatefulSets here using volumeClaimTemplates,
+  # infisical-postgres and infisical-valkey are the only StatefulSets here
-  # which is why this app alone was affected.
+  # using volumeClaimTemplates, which is why this app alone was affected.
   ignoreDifferences:
     - group: apps
       kind: StatefulSet
       jqPathExpressions:
+        - '.spec.volumeClaimTemplates[]?.apiVersion'
+        - '.spec.volumeClaimTemplates[]?.kind'
         - '.spec.volumeClaimTemplates[]?.metadata.creationTimestamp'
         - '.spec.volumeClaimTemplates[]?.spec.volumeMode'
         - '.spec.volumeClaimTemplates[]?.status'