infisical: ignore every volumeClaimTemplate field the api server injects

The earlier rule covered creationTimestamp, volumeMode and status but missed
apiVersion and kind, which the API server also injects into
volumeClaimTemplates. Those two alone kept both StatefulSets permanently
OutOfSync: a sync would apply successfully and report Synced, then the very
next comparison flagged them again.

applications/minio-aistor/minio-aistor-backendtrafficpolicy.yaml

@@ -25,5 +25,12 @@ spec:
       name: minio-aistor-api-route
   timeout:
     http:
-      connectionIdleTimeout: 3600s
+      connectionIdleTimeout: 30s
+      maxConnectionDuration: 300s
       requestTimeout: 0s
+  retry:
+    numRetries: 3
+    retryOn:
+      triggers:
+        - connect-failure
+        - reset

infra/argocd/applications/infisical-application.yaml

@@ -18,15 +18,17 @@ spec:
     server: https://kubernetes.default.svc
     namespace: infisical
   # A StatefulSet's volumeClaimTemplates are immutable, and the API server
-  # injects fields into them that are not in the manifest (creationTimestamp,
-  # volumeMode, a status block). ArgoCD diffs those and reports OutOfSync
-  # forever, since syncing can never resolve them. infisical-postgres and
-  # infisical-valkey are the only StatefulSets here using volumeClaimTemplates,
-  # which is why this app alone was affected.
+  # injects fields into them that are not in the manifest: apiVersion, kind,
+  # metadata.creationTimestamp, spec.volumeMode and a status block. ArgoCD
+  # diffs those and reports OutOfSync forever, since no sync can resolve them.
+  # infisical-postgres and infisical-valkey are the only StatefulSets here
+  # using volumeClaimTemplates, which is why this app alone was affected.
   ignoreDifferences:
     - group: apps
       kind: StatefulSet
       jqPathExpressions:
+        - '.spec.volumeClaimTemplates[]?.apiVersion'
+        - '.spec.volumeClaimTemplates[]?.kind'
         - '.spec.volumeClaimTemplates[]?.metadata.creationTimestamp'
         - '.spec.volumeClaimTemplates[]?.spec.volumeMode'
         - '.spec.volumeClaimTemplates[]?.status'