From 38e5bf84641a2e8c2af8c176014cce66cdee18e1 Mon Sep 17 00:00:00 2001
From: Janis <janis-e@gmx.de>
Date: Tue, 5 May 2026 08:40:10 +0200
Subject: [PATCH] feat(victoria-metrics): add ignoreDifferences configuration
 for Secrets and WebhookConfigurations

---
 .../victoria-metrics-operator.yaml              | 17 +++++++++++++++++
 .../victoria-metrics/victoria-metrics.yaml      | 12 ++++++++++++
 2 files changed, 29 insertions(+)

diff --git a/eu-central-1/argo-apps/victoria-metrics/victoria-metrics-operator.yaml b/eu-central-1/argo-apps/victoria-metrics/victoria-metrics-operator.yaml
index a47351e..bb8d309 100644
--- a/eu-central-1/argo-apps/victoria-metrics/victoria-metrics-operator.yaml
+++ b/eu-central-1/argo-apps/victoria-metrics/victoria-metrics-operator.yaml
@@ -20,6 +20,22 @@ spec:
     - repoURL: git@git.janis-eccarius.de:NowChess/GitOps.git
       targetRevision: main
       ref: values
+  ignoreDifferences:
+    - group: ""
+      kind: Secret
+      name: victoria-metrics-operator-validation
+      jsonPointers:
+        - /data
+    - group: admissionregistration.k8s.io
+      kind: ValidatingWebhookConfiguration
+      name: victoria-metrics-operator-admission
+      jqPathExpressions:
+        - .webhooks[].clientConfig.caBundle
+    - group: admissionregistration.k8s.io
+      kind: MutatingWebhookConfiguration
+      name: victoria-metrics-operator-admission
+      jqPathExpressions:
+        - .webhooks[].clientConfig.caBundle
   syncPolicy:
     automated:
       prune: true
@@ -27,6 +43,7 @@ spec:
     syncOptions:
       - CreateNamespace=true
       - ServerSideApply=true
+      - RespectIgnoreDifferences=true
     retry:
       limit: 3
       backoff:
diff --git a/eu-central-1/argo-apps/victoria-metrics/victoria-metrics.yaml b/eu-central-1/argo-apps/victoria-metrics/victoria-metrics.yaml
index a9ca4be..1aef286 100644
--- a/eu-central-1/argo-apps/victoria-metrics/victoria-metrics.yaml
+++ b/eu-central-1/argo-apps/victoria-metrics/victoria-metrics.yaml
@@ -21,6 +21,17 @@ spec:
     - repoURL: git@git.janis-eccarius.de:NowChess/GitOps.git
       targetRevision: main
       ref: values
+  ignoreDifferences:
+    - group: ""
+      kind: Secret
+      name: vm-grafana
+      jsonPointers:
+        - /data
+    - group: apps
+      kind: Deployment
+      name: vm-grafana
+      jqPathExpressions:
+        - .spec.template.metadata.annotations."checksum/secret"
   syncPolicy:
     automated:
       prune: true
@@ -29,6 +40,7 @@ spec:
       - CreateNamespace=true
       - ServerSideApply=true
       - SkipDryRunOnMissingResource=true
+      - RespectIgnoreDifferences=true
     retry:
       limit: 5
       backoff: