apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: infisical
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://gitea.jsme.be/Jeffrey/Kubernetes-Manifests.git
    path: applications/infisical
    targetRevision: HEAD
    directory:
      recurse: true
      # secret.yaml holds Infisical's own bootstrap secrets — applied out-of-band,
      # committed here only as an emptied template. Never let ArgoCD apply it.
      exclude: secret.yaml
  destination:
    server: https://kubernetes.default.svc
    namespace: infisical
  # A StatefulSet's volumeClaimTemplates are immutable, and the API server
  # injects fields into them that are not in the manifest (creationTimestamp,
  # volumeMode, a status block). ArgoCD diffs those and reports OutOfSync
  # forever, since syncing can never resolve them. infisical-postgres and
  # infisical-valkey are the only StatefulSets here using volumeClaimTemplates,
  # which is why this app alone was affected.
  ignoreDifferences:
    - group: apps
      kind: StatefulSet
      jqPathExpressions:
        - '.spec.volumeClaimTemplates[]?.metadata.creationTimestamp'
        - '.spec.volumeClaimTemplates[]?.spec.volumeMode'
        - '.spec.volumeClaimTemplates[]?.status'
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - ApplyOutOfSyncOnly=true
      - ServerSideApply=true