From be51b842ff44dc7a75945456bb3d7d63f274c56b Mon Sep 17 00:00:00 2001
From: Claude Code <claude-code@alexandre-vazquez.cloud>
Date: Wed, 29 Apr 2026 15:25:24 +0200
Subject: [PATCH] fix: add kyverno ignoreDifferences for webhook caBundles and
 SkipDryRunOnMissingResource

---
 argocd/applications/kyverno.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/argocd/applications/kyverno.yaml b/argocd/applications/kyverno.yaml
index 8d67da0..e56fdbd 100644
--- a/argocd/applications/kyverno.yaml
+++ b/argocd/applications/kyverno.yaml
@@ -14,7 +14,22 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: kyverno
+  ignoreDifferences:
+  - group: admissionregistration.k8s.io
+    kind: MutatingWebhookConfiguration
+    jqPathExpressions:
+    - .webhooks[].clientConfig.caBundle
+  - group: admissionregistration.k8s.io
+    kind: ValidatingWebhookConfiguration
+    jqPathExpressions:
+    - .webhooks[].clientConfig.caBundle
+  - group: apiextensions.k8s.io
+    kind: CustomResourceDefinition
+    jqPathExpressions:
+    - .spec.conversion.webhook.clientConfig.caBundle
   syncPolicy:
     syncOptions:
     - CreateNamespace=true
     - ServerSideApply=true
+    - SkipDryRunOnMissingResource=true
+    - RespectIgnoreDifferences=true