argoproj / argo-cd

Declarative Continuous Deployment for Kubernetes
https://argo-cd.readthedocs.io
Apache License 2.0
16.81k stars 5.09k forks source link

Argocd-repo-server temp volume mount: operation not permitted #17251

Open Lf1tz opened 4 months ago

Lf1tz commented 4 months ago

Checklist:

Describe the bug

I am mounting a volume into my argocd-repo-server pod since the pod is consuming all of the hosts ephemeral storage otherwise.

When the pods starts i get following errors:

time="2024-02-20T13:29:43Z" level=info msg="ArgoCD Repository Server is starting" built="2024-02-14T17:37:43Z" commit=a79e0eaca415461dc36615470cecc25d6d38cefb port=8081 version=v2.10.1+a79e0ea time="2024-02-20T13:29:43Z" level=info msg="Generating self-signed TLS certificate for this session" time="2024-02-20T13:29:47Z" level=warning msg="Failed to restore cloned repositories paths: chmod /tmp/_argocd-repo: operation not permitted" time="2024-02-20T13:29:47Z" level=info msg="Initializing GnuPG keyring at /app/config/gpg/keys" time="2024-02-20T13:29:47Z" level=info msg="gpg --no-permission-warning --logger-fd 1 --batch --gen-key /tmp/gpg-key-recipe503025617" dir= execID=b1687 time="2024-02-20T13:29:47Z" level=fatal msg="listen unix /tmp/reposerver-ask-pass.sock: bind: operation not permitted"

To Reproduce

Mount a volume to argocd-repo-server at /tmp

Expected behavior

The mounted volume should be used as storage for the cache.

Version

argocd: v2.10.1+a79e0ea

I tried to set fsgroup to 999. I tried to disable the seccomp profile.

Lf1tz commented 3 months ago

Any updates here? The issue still persists.