From 8ad6672c2f4cad7edba9c298b99fdb453ab27a4c Mon Sep 17 00:00:00 2001
From: chemavx <chemavx@git.chemavx.xyz>
Date: Sat, 9 May 2026 17:46:12 +0000
Subject: [PATCH] fix: ArgoCD no sobreescribe zona-exclusion-secrets
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Añade ignoreDifferences para /data del Secret y
RespectIgnoreDifferences=true para que el sync no aplique
el recurso cuando la única diferencia es en los datos del secret.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 zona-exclusion/argocd-app.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/zona-exclusion/argocd-app.yaml b/zona-exclusion/argocd-app.yaml
index ad39cbc..09e6fb5 100644
--- a/zona-exclusion/argocd-app.yaml
+++ b/zona-exclusion/argocd-app.yaml
@@ -12,9 +12,17 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: zona-exclusion
+  ignoreDifferences:
+    - group: ""
+      kind: Secret
+      name: zona-exclusion-secrets
+      namespace: zona-exclusion
+      jsonPointers:
+        - /data
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
     syncOptions:
       - CreateNamespace=true
+      - RespectIgnoreDifferences=true