From ff1ae78f6608694c18328ca645bc5932cc7fb916 Mon Sep 17 00:00:00 2001
From: 0xFEEDC0DE64 <daniel@brunner.ninja>
Date: Sun, 18 Oct 2026 14:31:44 +0200
Subject: [PATCH] Make Argo bootstrap reconciliation idempotent

---
 bootstrap/install.sh   | 4 ++--
 bootstrap/metallb.yaml | 3 +--
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/bootstrap/install.sh b/bootstrap/install.sh
index 0ed6e10..50077d0 100755
--- a/bootstrap/install.sh
+++ b/bootstrap/install.sh
@@ -9,8 +9,8 @@ if [ "${current_context}" != "${expected_context}" ]; then
 fi
 
 script_dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
-kubectl apply --server-side --dry-run=server -k "${script_dir}"
-kubectl apply --server-side -k "${script_dir}"
+kubectl apply --dry-run=server -k "${script_dir}"
+kubectl apply -k "${script_dir}"
 kubectl --namespace argocd wait application/immich-sync \
   --for=jsonpath='{.status.sync.status}'=Synced \
   --timeout=5m
diff --git a/bootstrap/metallb.yaml b/bootstrap/metallb.yaml
index 8dbd6fc..575ce30 100644
--- a/bootstrap/metallb.yaml
+++ b/bootstrap/metallb.yaml
@@ -13,8 +13,7 @@ spec:
     server: https://kubernetes.default.svc
     namespace: metallb-system
   ignoreDifferences:
-  - group: ""
-    kind: Secret
+  - kind: Secret
     name: metallb-webhook-cert
     namespace: metallb-system
     jsonPointers: