infisical: ignore the volumeClaimTemplate fields argocd cannot reconcile

A StatefulSet's volumeClaimTemplates are immutable, and the API server injects creationTimestamp, volumeMode and a status block that are not in the manifest. ArgoCD diffed those and reported OutOfSync permanently, since no sync could ever resolve them. infisical-postgres and infisical-valkey are the only StatefulSets here using volumeClaimTemplates, which is why this app alone was affected.
gitea: drop the orphaned runner pvc that could never bind
2026-08-29 18:00:35 +02:00 · 2026-08-29 18:00:28 +02:00
2 changed files with 13 additions and 13 deletions
@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: gitea-runner-pvc
-  namespace: gitea
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: longhorn-static
-  volumeName: gitea-runner-data
-  resources:
-    requests:
-      storage: 20Gi
@@ -17,6 +17,19 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: infisical
+  # A StatefulSet's volumeClaimTemplates are immutable, and the API server
+  # injects fields into them that are not in the manifest (creationTimestamp,
+  # volumeMode, a status block). ArgoCD diffs those and reports OutOfSync
+  # forever, since syncing can never resolve them. infisical-postgres and
+  # infisical-valkey are the only StatefulSets here using volumeClaimTemplates,
+  # which is why this app alone was affected.
+  ignoreDifferences:
+    - group: apps
+      kind: StatefulSet
+      jqPathExpressions:
+        - '.spec.volumeClaimTemplates[]?.metadata.creationTimestamp'
+        - '.spec.volumeClaimTemplates[]?.spec.volumeMode'
+        - '.spec.volumeClaimTemplates[]?.status'
  syncPolicy:
    automated:
      prune: true