From a49903fbe8bf7cf9633da9d340ee916de6b50323 Mon Sep 17 00:00:00 2001
From: swaphb <s@swaphb.com>
Date: Sun, 9 Aug 2026 20:16:38 -0400
Subject: [PATCH] Apply Kyverno CRDs server-side

---
 argocd/apps/kyverno.yaml | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/argocd/apps/kyverno.yaml b/argocd/apps/kyverno.yaml
index 119fc2a..765de55 100644
--- a/argocd/apps/kyverno.yaml
+++ b/argocd/apps/kyverno.yaml
@@ -11,6 +11,12 @@ spec:
     repoURL: https://kyverno.github.io/kyverno/
     chart: kyverno
     targetRevision: 3.3.7
+    helm:
+      values: |
+        crds:
+          annotations:
+            # The two policy CRDs exceed client-side apply's annotation limit.
+            argocd.argoproj.io/sync-options: ServerSideApply=true
   destination:
     server: https://kubernetes.default.svc
     namespace: kyverno
@@ -20,6 +26,4 @@ spec:
       selfHeal: true
     syncOptions:
       - CreateNamespace=true
-      # Kyverno policy CRDs exceed Kubernetes' client-side apply annotation
-      # limit, so replacement avoids storing the oversized last-applied blob.
-      - Replace=true
+      - ServerSideApply=true