Apply Kyverno CRDs server-side

argocd/apps/kyverno.yaml

@@ -11,6 +11,12 @@ spec:
     repoURL: https://kyverno.github.io/kyverno/
     chart: kyverno
     targetRevision: 3.3.7
+    helm:
+      values: |
+        crds:
+          annotations:
+            # The two policy CRDs exceed client-side apply's annotation limit.
+            argocd.argoproj.io/sync-options: ServerSideApply=true
   destination:
     server: https://kubernetes.default.svc
     namespace: kyverno
@@ -20,6 +26,4 @@ spec:
       selfHeal: true
     syncOptions:
       - CreateNamespace=true
-      # Kyverno policy CRDs exceed Kubernetes' client-side apply annotation
+      - ServerSideApply=true
-      # limit, so replacement avoids storing the oversized last-applied blob.
-      - Replace=true