fix: ignore CRD label differences for Kyverno

Kyverno's migration job creates policies.kyverno.io CRD without Helm
labels, causing ArgoCD sync issues. Configure ignoreDifferences to
ignore label/annotation mismatches on the CRD while respecting all
other drift via RespectIgnoreDifferences syncOption.

Fixes fresh deployment sync issues where migration job runs before
Helm chart manages the CRD.

Author: butler54

values-baremetal-gpu.yaml

@@ -223,6 +223,14 @@ clusterGroup:
           limit: 20
         syncOptions:
           - ServerSideApply=true
+          - RespectIgnoreDifferences=true
+      ignoreDifferences:
+        - group: apiextensions.k8s.io
+          kind: CustomResourceDefinition
+          name: policies.kyverno.io
+          jsonPointers:
+            - /metadata/labels
+            - /metadata/annotations
       extraValueFiles:
         - '/overrides/values-kyverno.yaml'
       overrides:

values-baremetal.yaml

@@ -196,6 +196,14 @@ clusterGroup:
           limit: 20
         syncOptions:
           - ServerSideApply=true
+          - RespectIgnoreDifferences=true
+      ignoreDifferences:
+        - group: apiextensions.k8s.io
+          kind: CustomResourceDefinition
+          name: policies.kyverno.io
+          jsonPointers:
+            - /metadata/labels
+            - /metadata/annotations
       extraValueFiles:
         - '/overrides/values-kyverno.yaml'
       overrides:

values-simple.yaml

@@ -129,6 +129,14 @@ clusterGroup:
           limit: 20
         syncOptions:
           - ServerSideApply=true
+          - RespectIgnoreDifferences=true
+      ignoreDifferences:
+        - group: apiextensions.k8s.io
+          kind: CustomResourceDefinition
+          name: policies.kyverno.io
+          jsonPointers:
+            - /metadata/labels
+            - /metadata/annotations
       extraValueFiles:
         - '/overrides/values-kyverno.yaml'