Vault Secrets Operator Restart Annotation shows resources as out of drift

[the-green-man14]

Hello,

We have Vault Secrets Operator configured to restart deployments when vault secrets get changed. As part of this, it adds the following annotation to deployments:
spec:
metadata:
annotations:
vso.secrets.hashicorp.com/restartedAt: '2025-09-16T08:00:52Z'

How is it possible to get argocd to ignore this annotation for the whole of argocd?
https://argo-cd.readthedocs.io/en/stable/user-guide/diffing/#system-level-configuration

We have tried to ignore differences like the below:
resource.customizations.ignoreDifferences.apps_Deployment: |
jqPathExpressions:
- '.spec.template.metadata.annotations."vso.secrets.hashicorp.com/restartedAt"'
resource.customizations.ignoreDifferences.apps_ReplicaSet: |
jqPathExpressions:
- '.spec.template.metadata.annotations."vso.secrets.hashicorp.com/restartedAt"'
resource.customizations.ignoreDifferences.apps_StatefulSet: |
jqPathExpressions:
- '.spec.template.metadata.annotations."vso.secrets.hashicorp.com/restartedAt"'

However, then the annotation field just becomes out of sync despite the vso correctly being hidden.

Does anyone have any recommendations on how they go this to work nicely?

[the-green-man14]

It is worth noting that this solution has been provided before:
#3150

But that appears to ignore all annotations from my testing which isn't ideal as sometimes we want annotations to be synced from argo

resource.customizations.ignoreDifferences.all: |
  jqPathExpressions:
    - .spec.template.metadata.annotations."kubectl.kubernetes.io/restartedAt"
    - .spec.template.metadata.annotations."vso.secrets.hashicorp.com/restartedAt"
    - if (.spec.template.metadata.annotations | keys | length) > 0 then .spec.template.metadata.annotations else empty end
  
  resource.customizations.ignoreDifferences.all: |
    jqPathExpressions:
      - .spec.template.metadata.annotations."vso.secrets.hashicorp.com/restartedAt"
     - if (.spec.template.metadata.annotations | keys | length) == 0 then .spec.template.metadata.annotations else empty end