infisical: ignore the volumeClaimTemplate fields argocd cannot reconcile

A StatefulSet's volumeClaimTemplates are immutable, and the API server
injects creationTimestamp, volumeMode and a status block that are not in
the manifest. ArgoCD diffed those and reported OutOfSync permanently,
since no sync could ever resolve them.

infisical-postgres and infisical-valkey are the only StatefulSets here
using volumeClaimTemplates, which is why this app alone was affected.

applications/gitea/runner/gitea-runner-persistentvolumeclaim.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: gitea-runner-pvc
-  namespace: gitea
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: longhorn-static
-  volumeName: gitea-runner-data
-  resources:
-    requests:
-      storage: 20Gi

infra/argocd/applications/infisical-application.yaml

@@ -17,6 +17,19 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: infisical
+  # A StatefulSet's volumeClaimTemplates are immutable, and the API server
+  # injects fields into them that are not in the manifest (creationTimestamp,
+  # volumeMode, a status block). ArgoCD diffs those and reports OutOfSync
+  # forever, since syncing can never resolve them. infisical-postgres and
+  # infisical-valkey are the only StatefulSets here using volumeClaimTemplates,
+  # which is why this app alone was affected.
+  ignoreDifferences:
+    - group: apps
+      kind: StatefulSet
+      jqPathExpressions:
+        - '.spec.volumeClaimTemplates[]?.metadata.creationTimestamp'
+        - '.spec.volumeClaimTemplates[]?.spec.volumeMode'
+        - '.spec.volumeClaimTemplates[]?.status'
   syncPolicy:
     automated:
       prune: true