Deploy an application in ArgoCD using two plugins together

[devopsInterviews]

Checklist:

• [ ] I've searched in the docs and FAQ for my answer: https://bit.ly/argocd-faq.
• [ ] I've included steps to reproduce the bug.
• [ ] I've pasted the output of argocd version.

Describe the bug

I am trying to deploy a Helm chart that uses argocd-vault-plugin using a Helmfile. When trying to use each plugin separately (helmfile plugin\ vault plugin) it works. When trying to depoy an app that needs to use both plugins the app is deployed but stays empty. Its status is synced and ok. There are no errors or information in the log that suggest what the problem is.

To Reproduce

• Create kv secret in vault in path: kvv2/argo/test with keys: username password

• Configure approle authentication in Vault for the argocd vault plugin to have permissions to read secrets from vault.

• Deploy ArgoCD helm chart with helmfile plugin and vault plugin as sidecars.

Helmfile plugin configmap:

ArgoCD deployment patch for helmfile plugin:

ArgoCD vault plugin configmap:

ArgoCD deployment patch for vault plugin:

• Create new mongodb Helm chart that reads secrets from Vault with the ArgoCD vault plugin. Example of configmap:

  

• Create helmfile.yaml under 'applications' repository that deploys the mongodb chart:

  

• Create application.yaml file to deploy the helmfile.yaml and execute "kubectl apply -f application.yaml":

1. When the application.yaml looks like this the mongodb chart is deployed but the vault secret values are not changed:

configmap manifest in argocd:

2. When the application.yaml has no plugin specified or has the argocd-vault-plugin-helm specified the mongodb chart is not deployed but the application's status is ok:

   

3. When deploying the mongodb chart without a helmfile with the source being a helm repository and not a git repository it is deployed and the vault secret values are changed:

   

Expected behavior

The vault secret values will be changed as expected when using a helmfile.yaml to deploy a chart that requires the argocd vault plugin

Screenshots

Version

argocd: v2.8.4+c279299
  BuildDate: 2023-09-13T19:43:37Z
  GitCommit: c27929928104dc37b937764baf65f38b78930e59
  GitTreeState: clean
  GoVersion: go1.20.7
  Compiler: gc
  Platform: linux/amd64
argocd-server: v2.8.3+77556d9

Logs

Paste any relevant application logs here.

[reggie-k]

Can https://github.com/crumbhole/argocd-lovely-plugin help?

[andrii-korotkov-verkada]

ArgoCD versions 2.10 and below have reached EOL. Can you upgrade and let us know if the issue is still present, please?