Use ServerSideApply instead of Replace for Kyverno

[morey-tech]

I am guessing that one of the Kyverno CRDs was too big to fit into kubectl.kubernetes.io/last-applied-configuration annotation that is added by kubectl apply, causing the Application sync to fail, leading to the use of Replace: true. This sync option has the potential to be destructive and might lead to resources having to be recreated, which could cause an outage.

k8s-bootstrapper/bootstrap/templates/application_kyverno.yaml

Line 22 in 9f87f19

- Replace=true

There's support for ServerSideApply now, which addresses the original issue and removes the potentially destructive syncs. Try using this instead:

apiVersion: argoproj.io/v1alpha1
kind: Application
spec:
  ...
  syncPolicy:
    syncOptions:
    - ServerSideApply=true