From aa7c5d2cb26df5d3750ef6a8bebb1d34aaae68aa Mon Sep 17 00:00:00 2001
From: Scooby Husky <garrettstone499@gmail.com>
Date: Tue, 10 Mar 2026 19:12:21 -0500
Subject: [PATCH] Add ignoreDifferences for crowdsec-lapi secret checksum

The checksum/lapi-secret annotation on the LAPI Deployment changes
when CrowdSec auto-generates credentials, causing permanent
OutOfSync with ArgoCD ServerSideDiff.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 argocd-apps/infrastructure/crowdsec.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/argocd-apps/infrastructure/crowdsec.yaml b/argocd-apps/infrastructure/crowdsec.yaml
index 14b5a6e..6c8baa7 100644
--- a/argocd-apps/infrastructure/crowdsec.yaml
+++ b/argocd-apps/infrastructure/crowdsec.yaml
@@ -15,6 +15,11 @@ spec:
       name: crowdsec-lapi-secrets
       jsonPointers:
         - /data
+    - group: apps
+      kind: Deployment
+      name: crowdsec-lapi
+      jqPathExpressions:
+        - .spec.template.metadata.annotations."checksum/lapi-secret"
   sources:
     - repoURL: https://crowdsecurity.github.io/helm-charts
       chart: crowdsec