Update Cilium application.yaml to enhance ignoreDifferences for cilium-operator Deployment and improve Helm sync handling. Modify kube-vip daemonset.yaml to adjust VIP interface and add new environment variables for better configuration. Update README.md with troubleshooting tips for kube-vip and Helm upgrade conflicts.

clusters/noble/apps/cilium/application.yaml

@@ -7,8 +7,8 @@ metadata:
     argocd.argoproj.io/sync-wave: "0"
 spec:
   project: default
-  # Helm TLS material for Hubble is rotated/generated; Argo SSA and CLI helm
-  # upgrades both touch Secret data and cause apply conflicts unless ignored.
+  # Argo SSA vs CLI helm: ignore generated TLS and fields Argo commonly owns so
+  # RespectIgnoreDifferences can skip fighting Helm on sync.
   ignoreDifferences:
     - group: ""
       kind: Secret
@@ -16,6 +16,13 @@ spec:
       namespace: kube-system
       jqPathExpressions:
         - .data
+    - group: apps
+      kind: Deployment
+      name: cilium-operator
+      namespace: kube-system
+      jsonPointers:
+        - /spec/replicas
+        - /spec/strategy/rollingUpdate/maxUnavailable
   destination:
     server: https://kubernetes.default.svc
     namespace: kube-system