Let Argo ignore dynamically generated secret diffs

argocd/applications/garage.yaml

@@ -20,6 +20,13 @@ spec:
   destination:
     server: 'https://kubernetes.default.svc'
     namespace: garage
+  ignoreDifferences:
+    - group: ""
+      kind: Secret
+      name: garage-rpc-secret
+      namespace: garage
+      jsonPointers:
+        - /data
   syncPolicy:
     automated:
       prune: true

argocd/applications/harbor-operator.yaml

@@ -14,6 +14,53 @@ spec:
   destination:
     server: 'https://kubernetes.default.svc'
     namespace: harbor-operator
+  ignoreDifferences:
+    - group: ""
+      kind: Secret
+      namespace: harbor-operator
+      name: harbor-core
+      jsonPointers:
+        - /data
+    - group: ""
+      kind: Secret
+      namespace: harbor-operator
+      name: harbor-jobservice
+      jsonPointers:
+        - /data
+    - group: ""
+      kind: Secret
+      namespace: harbor-operator
+      name: harbor-registry
+      jsonPointers:
+        - /data
+    - group: ""
+      kind: Secret
+      namespace: harbor-operator
+      name: harbor-registry-htpasswd
+      jsonPointers:
+        - /data
+    - group: apps
+      kind: Deployment
+      namespace: harbor-operator
+      name: harbor-core
+      jsonPointers:
+        - /spec/template/metadata/annotations/checksum~1secret
+        - /spec/template/metadata/annotations/checksum~1secret-jobservice
+    - group: apps
+      kind: Deployment
+      namespace: harbor-operator
+      name: harbor-jobservice
+      jsonPointers:
+        - /spec/template/metadata/annotations/checksum~1secret
+        - /spec/template/metadata/annotations/checksum~1secret-core
+    - group: apps
+      kind: Deployment
+      namespace: harbor-operator
+      name: harbor-registry
+      jsonPointers:
+        - /spec/template/metadata/annotations/checksum~1secret
+        - /spec/template/metadata/annotations/checksum~1secret-core
+        - /spec/template/metadata/annotations/checksum~1secret-jobservice
   syncPolicy:
     automated:
      prune: true

argocd/applications/woodpecker.yaml

@@ -14,6 +14,13 @@ spec:
   destination:
     server: 'https://kubernetes.default.svc'
     namespace: woodpecker
+  ignoreDifferences:
+    - group: ""
+      kind: Secret
+      name: woodpecker-default-agent-secret
+      namespace: woodpecker
+      jsonPointers:
+        - /data
   syncPolicy:
     automated:
       prune: true