From 4e4be3109a79a59de2349123a0f89c29e835f29f Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Sat, 3 Jan 2026 20:18:17 +0900
Subject: [PATCH] FIX(external-secrets): fix ESO CRD OutOfSync

- Add ignoreDifferences for CRD caBundle and spec/versions
- Add RespectIgnoreDifferences syncOption
- Prevents ArgoCD from detecting drift on CRD fields managed by webhook
---
 external-secrets/argocd.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/external-secrets/argocd.yaml b/external-secrets/argocd.yaml
index 95bace8..d7c17fc 100644
--- a/external-secrets/argocd.yaml
+++ b/external-secrets/argocd.yaml
@@ -7,6 +7,12 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
+  ignoreDifferences:
+    - group: apiextensions.k8s.io
+      kind: CustomResourceDefinition
+      jsonPointers:
+        - /spec/conversion/webhook/clientConfig/caBundle
+        - /spec/versions
   sources:
   - repoURL: https://charts.external-secrets.io
     chart: external-secrets
@@ -29,6 +35,7 @@ spec:
     - CreateNamespace=true
     - PrunePropagationPolicy=foreground
     - PruneLast=true
+    - RespectIgnoreDifferences=true
     retry:
       limit: 5
       backoff: