search

argoproj / argo-cd

Declarative Continuous Deployment for Kubernetes
https://argo-cd.readthedocs.io
Apache License 2.0
18.01k stars 5.49k forks source link

Unable to sync helm chart with OCI dependency hosted in private docker.io #19181

Open jmcorne opened 4 months ago

jmcorne commented 4 months ago

Checklist:

Describe the bug We have an umbrella helm chart in GitHub that contains 2 dependencies:

dependencies:
  - name: my-helm-internal
    version: 3.0.0-rc
    repository: oci://docker.io/myorganization
  - name: apisix-dashboard
    repository: https://charts.apiseven.com
    version: 0.8.2
    condition: apisix-dashboard.enabled

Repository has been added using ArgoCD CLI

argocd repo add docker.io --type helm --name docker.io --enable-oci --username "xxx" --password "xxx"

ArgoCD UI shows it can login successfully with provided creds.

Test with ArgoCD v2.4.14 The app using umbrella Helm from GitHub repo has been successfully created.

Test with ArgoCD v2.10.2

  1. The app is not created from GitHub repo. ArgoCD complains with the following error: could not download oci://docker.io/myorganization/my-helm-internal: pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed
  2. Configure another OCI repo in Azure with the same dependencies. App created successfully.
  3. Do helm repo login, then helm pull / helm dependency update locally and works

Notes

To Reproduce

Expected behavior

Screenshots image

Version

argocd: v2.10.2+fcf5d8c
  BuildDate: 2024-03-01T21:24:51Z
  GitCommit: fcf5d8c2381b68ab1621b90be63913b12cca2eb7
  GitTreeState: clean
  GoVersion: go1.21.3
  Compiler: gc
  Platform: linux/amd64

Logs



time="2024-07-24T08:59:03Z" level=info msg="git fetch origin --tags --force --prune" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e execID=a1eae
time="2024-07-24T08:59:03Z" level=info msg=Trace args="[git fetch origin --tags --force --prune]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e operation_name="exec git" time_ms=549.629188
time="2024-07-24T08:59:03Z" level=info msg="git checkout --force ae6eb340d8e89a36aa931d4b117d50de131215f5" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e execID=42509
time="2024-07-24T08:59:03Z" level=info msg="finished unary call with code OK" grpc.code=OK grpc.method=Check grpc.service=grpc.health.v1.Health grpc.start_time="2024-07-24T08:59:03Z" grpc.time_ms=0.022 span.kind=server system=grpc
time="2024-07-24T08:59:03Z" level=info msg=Trace args="[git checkout --force ae6eb340d8e89a36aa931d4b117d50de131215f5]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e operation_name="exec git" time_ms=5.5671990000000005
time="2024-07-24T08:59:03Z" level=info msg="git clean -ffdx" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e execID=4ecb5
time="2024-07-24T08:59:03Z" level=info msg=Trace args="[git clean -ffdx]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e operation_name="exec git" time_ms=2.46374
time="2024-07-24T08:59:03Z" level=info msg="git rev-parse HEAD" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e execID=dd83a
time="2024-07-24T08:59:03Z" level=info msg="git rev-parse HEAD" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e execID=2936c
time="2024-07-24T08:59:03Z" level=info msg=Trace args="[git rev-parse HEAD]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e operation_name="exec git" time_ms=2.042783
time="2024-07-24T08:59:03Z" level=info msg="helm template . --name-template xxxxx-xxxx-shared-services --namespace yyyy-xxxxx-xxxx-svc --kube-version 1.28 --api-versions admissionregistration.k8s.io/v1 --api-versions admissionregistration.k8s.io/v1/MutatingWebhookConfiguration --api-versions admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration --api-versions apiextensions.k8s.io/v1 --api-versions apiextensions.k8s.io/v1/CustomResourceDefinition --api-versions apiregistration.k8s.io/v1 --api-versions apiregistration.k8s.io/v1/APIService --api-versions apisix.apache.org/v2 --api-versions apisix.apache.org/v2/ApisixClusterConfig --api-versions apisix.apache.org/v2/ApisixConsumer --api-versions apisix.apache.org/v2/ApisixGlobalRule --api-versions apisix.apache.org/v2/ApisixPluginConfig --api-versions apisix.apache.org/v2/ApisixRoute --api-versions apisix.apache.org/v2/ApisixTls --api-versions apisix.apache.org/v2/ApisixUpstream --api-versions apisix.apache.org/v2beta3 --api-versions apisix.apache.org/v2beta3/ApisixClusterConfig --api-versions apisix.apache.org/v2beta3/ApisixConsumer --api-versions apisix.apache.org/v2beta3/ApisixPluginConfig --api-versions apisix.apache.org/v2beta3/ApisixRoute --api-versions apisix.apache.org/v2beta3/ApisixTls --api-versions apisix.apache.org/v2beta3/ApisixUpstream --api-versions apps/v1 --api-versions apps/v1/ControllerRevision --api-versions apps/v1/DaemonSet --api-versions apps/v1/Deployment --api-versions apps/v1/ReplicaSet --api-versions apps/v1/StatefulSet --api-versions argoproj.io/v1alpha1 --api-versions argoproj.io/v1alpha1/AppProject --api-versions argoproj.io/v1alpha1/Application --api-versions argoproj.io/v1alpha1/EventBus --api-versions argoproj.io/v1alpha1/EventSource --api-versions argoproj.io/v1alpha1/Sensor --api-versions autoscaling/v1 --api-versions autoscaling/v1/HorizontalPodAutoscaler --api-versions autoscaling/v2 --api-versions autoscaling/v2/HorizontalPodAutoscaler --api-versions batch/v1 --api-versions batch/v1/CronJob --api-versions batch/v1/Job --api-versions bitnami.com/v1alpha1 --api-versions bitnami.com/v1alpha1/SealedSecret --api-versions certificates.k8s.io/v1 --api-versions certificates.k8s.io/v1/CertificateSigningRequest --api-versions coordination.k8s.io/v1 --api-versions coordination.k8s.io/v1/Lease --api-versions crd.k8s.amazonaws.com/v1alpha1 --api-versions crd.k8s.amazonaws.com/v1alpha1/ENIConfig --api-versions discovery.k8s.io/v1 --api-versions discovery.k8s.io/v1/EndpointSlice --api-versions elbv2.k8s.aws/v1alpha1 --api-versions elbv2.k8s.aws/v1alpha1/TargetGroupBinding --api-versions elbv2.k8s.aws/v1beta1 --api-versions elbv2.k8s.aws/v1beta1/IngressClassParams --api-versions elbv2.k8s.aws/v1beta1/TargetGroupBinding --api-versions events.k8s.io/v1 --api-versions events.k8s.io/v1/Event --api-versions flowcontrol.apiserver.k8s.io/v1beta2 --api-versions flowcontrol.apiserver.k8s.io/v1beta2/FlowSchema --api-versions flowcontrol.apiserver.k8s.io/v1beta2/PriorityLevelConfiguration --api-versions flowcontrol.apiserver.k8s.io/v1beta3 --api-versions flowcontrol.apiserver.k8s.io/v1beta3/FlowSchema --api-versions flowcontrol.apiserver.k8s.io/v1beta3/PriorityLevelConfiguration --api-versions helm.fluxcd.io/v1 --api-versions helm.fluxcd.io/v1/HelmRelease --api-versions networking.k8s.aws/v1alpha1 --api-versions networking.k8s.aws/v1alpha1/PolicyEndpoint --api-versions networking.k8s.io/v1 --api-versions networking.k8s.io/v1/Ingress --api-versions networking.k8s.io/v1/IngressClass --api-versions networking.k8s.io/v1/NetworkPolicy --api-versions node.k8s.io/v1 --api-versions node.k8s.io/v1/RuntimeClass --api-versions policy/v1 --api-versions policy/v1/PodDisruptionBudget --api-versions postgresql.cnpg.io/v1 --api-versions postgresql.cnpg.io/v1/Backup --api-versions postgresql.cnpg.io/v1/Cluster --api-versions postgresql.cnpg.io/v1/Pooler --api-versions postgresql.cnpg.io/v1/ScheduledBackup --api-versions rbac.authorization.k8s.io/v1 --api-versions rbac.authorization.k8s.io/v1/ClusterRole --api-versions rbac.authorization.k8s.io/v1/ClusterRoleBinding --api-versions rbac.authorization.k8s.io/v1/Role --api-versions rbac.authorization.k8s.io/v1/RoleBinding --api-versions scheduling.k8s.io/v1 --api-versions scheduling.k8s.io/v1/PriorityClass --api-versions secrets-store.csi.x-k8s.io/v1 --api-versions secrets-store.csi.x-k8s.io/v1/SecretProviderClass --api-versions secrets-store.csi.x-k8s.io/v1/SecretProviderClassPodStatus --api-versions secrets-store.csi.x-k8s.io/v1alpha1 --api-versions secrets-store.csi.x-k8s.io/v1alpha1/SecretProviderClass --api-versions secrets-store.csi.x-k8s.io/v1alpha1/SecretProviderClassPodStatus --api-versions storage.k8s.io/v1 --api-versions storage.k8s.io/v1/CSIDriver --api-versions storage.k8s.io/v1/CSINode --api-versions storage.k8s.io/v1/CSIStorageCapacity --api-versions storage.k8s.io/v1/StorageClass --api-versions storage.k8s.io/v1/VolumeAttachment --api-versions uplink.inlets.dev/v1alpha1 --api-versions uplink.inlets.dev/v1alpha1/Tunnel --api-versions v1 --api-versions v1/ConfigMap --api-versions v1/Endpoints --api-versions v1/Event --api-versions v1/LimitRange --api-versions v1/Namespace --api-versions v1/Node --api-versions v1/PersistentVolume --api-versions v1/PersistentVolumeClaim --api-versions v1/Pod --api-versions v1/PodTemplate --api-versions v1/ReplicationController --api-versions v1/ResourceQuota --api-versions v1/Secret --api-versions v1/Service --api-versions v1/ServiceAccount --api-versions velero.io/v1 --api-versions velero.io/v1/Backup --api-versions velero.io/v1/BackupRepository --api-versions velero.io/v1/BackupStorageLocation --api-versions velero.io/v1/DeleteBackupRequest --api-versions velero.io/v1/DownloadRequest --api-versions velero.io/v1/PodVolumeBackup --api-versions velero.io/v1/PodVolumeRestore --api-versions velero.io/v1/Restore --api-versions velero.io/v1/Schedule --api-versions velero.io/v1/ServerStatusRequest --api-versions velero.io/v1/VolumeSnapshotLocation --api-versions velero.io/v2alpha1 --api-versions velero.io/v2alpha1/DataDownload --api-versions velero.io/v2alpha1/DataUpload --api-versions vpcresources.k8s.aws/v1alpha1 --api-versions vpcresources.k8s.aws/v1alpha1/CNINode --api-versions vpcresources.k8s.aws/v1beta1 --api-versions vpcresources.k8s.aws/v1beta1/SecurityGroupPolicy --include-crds" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services execID=6f97c
time="2024-07-24T08:59:03Z" level=info msg=Trace args="[git rev-parse HEAD]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e operation_name="exec git" time_ms=3.235772
time="2024-07-24T08:59:03Z" level=info msg="helm show values ." dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services execID=3cfb6
time="2024-07-24T08:59:03Z" level=error msg="`helm template . --name-template xxxxx-xxxx-shared-services --namespace yyyy-xxxxx-xxxx-svc --kube-version 1.28 --api-versions admissionregistration.k8s.io/v1 --api-versions admissionregistration.k8s.io/v1/MutatingWebhookConfiguration --api-versions admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration --api-versions apiextensions.k8s.io/v1 --api-versions apiextensions.k8s.io/v1/CustomResourceDefinition --api-versions apiregistration.k8s.io/v1 --api-versions apiregistration.k8s.io/v1/APIService --api-versions apisix.apache.org/v2 --api-versions apisix.apache.org/v2/ApisixClusterConfig --api-versions apisix.apache.org/v2/ApisixConsumer --api-versions apisix.apache.org/v2/ApisixGlobalRule --api-versions apisix.apache.org/v2/ApisixPluginConfig --api-versions apisix.apache.org/v2/ApisixRoute --api-versions apisix.apache.org/v2/ApisixTls --api-versions apisix.apache.org/v2/ApisixUpstream --api-versions apisix.apache.org/v2beta3 --api-versions apisix.apache.org/v2beta3/ApisixClusterConfig --api-versions apisix.apache.org/v2beta3/ApisixConsumer --api-versions apisix.apache.org/v2beta3/ApisixPluginConfig --api-versions apisix.apache.org/v2beta3/ApisixRoute --api-versions apisix.apache.org/v2beta3/ApisixTls --api-versions apisix.apache.org/v2beta3/ApisixUpstream --api-versions apps/v1 --api-versions apps/v1/ControllerRevision --api-versions apps/v1/DaemonSet --api-versions apps/v1/Deployment --api-versions apps/v1/ReplicaSet --api-versions apps/v1/StatefulSet --api-versions argoproj.io/v1alpha1 --api-versions argoproj.io/v1alpha1/AppProject --api-versions argoproj.io/v1alpha1/Application --api-versions argoproj.io/v1alpha1/EventBus --api-versions argoproj.io/v1alpha1/EventSource --api-versions argoproj.io/v1alpha1/Sensor --api-versions autoscaling/v1 --api-versions autoscaling/v1/HorizontalPodAutoscaler --api-versions autoscaling/v2 --api-versions autoscaling/v2/HorizontalPodAutoscaler --api-versions batch/v1 --api-versions batch/v1/CronJob --api-versions batch/v1/Job --api-versions bitnami.com/v1alpha1 --api-versions bitnami.com/v1alpha1/SealedSecret --api-versions certificates.k8s.io/v1 --api-versions certificates.k8s.io/v1/CertificateSigningRequest --api-versions coordination.k8s.io/v1 --api-versions coordination.k8s.io/v1/Lease --api-versions crd.k8s.amazonaws.com/v1alpha1 --api-versions crd.k8s.amazonaws.com/v1alpha1/ENIConfig --api-versions discovery.k8s.io/v1 --api-versions discovery.k8s.io/v1/EndpointSlice --api-versions elbv2.k8s.aws/v1alpha1 --api-versions elbv2.k8s.aws/v1alpha1/TargetGroupBinding --api-versions elbv2.k8s.aws/v1beta1 --api-versions elbv2.k8s.aws/v1beta1/IngressClassParams --api-versions elbv2.k8s.aws/v1beta1/TargetGroupBinding --api-versions events.k8s.io/v1 --api-versions events.k8s.io/v1/Event --api-versions flowcontrol.apiserver.k8s.io/v1beta2 --api-versions flowcontrol.apiserver.k8s.io/v1beta2/FlowSchema --api-versions flowcontrol.apiserver.k8s.io/v1beta2/PriorityLevelConfiguration --api-versions flowcontrol.apiserver.k8s.io/v1beta3 --api-versions flowcontrol.apiserver.k8s.io/v1beta3/FlowSchema --api-versions flowcontrol.apiserver.k8s.io/v1beta3/PriorityLevelConfiguration --api-versions helm.fluxcd.io/v1 --api-versions helm.fluxcd.io/v1/HelmRelease --api-versions networking.k8s.aws/v1alpha1 --api-versions networking.k8s.aws/v1alpha1/PolicyEndpoint --api-versions networking.k8s.io/v1 --api-versions networking.k8s.io/v1/Ingress --api-versions networking.k8s.io/v1/IngressClass --api-versions networking.k8s.io/v1/NetworkPolicy --api-versions node.k8s.io/v1 --api-versions node.k8s.io/v1/RuntimeClass --api-versions policy/v1 --api-versions policy/v1/PodDisruptionBudget --api-versions postgresql.cnpg.io/v1 --api-versions postgresql.cnpg.io/v1/Backup --api-versions postgresql.cnpg.io/v1/Cluster --api-versions postgresql.cnpg.io/v1/Pooler --api-versions postgresql.cnpg.io/v1/ScheduledBackup --api-versions rbac.authorization.k8s.io/v1 --api-versions rbac.authorization.k8s.io/v1/ClusterRole --api-versions rbac.authorization.k8s.io/v1/ClusterRoleBinding --api-versions rbac.authorization.k8s.io/v1/Role --api-versions rbac.authorization.k8s.io/v1/RoleBinding --api-versions scheduling.k8s.io/v1 --api-versions scheduling.k8s.io/v1/PriorityClass --api-versions secrets-store.csi.x-k8s.io/v1 --api-versions secrets-store.csi.x-k8s.io/v1/SecretProviderClass --api-versions secrets-store.csi.x-k8s.io/v1/SecretProviderClassPodStatus --api-versions secrets-store.csi.x-k8s.io/v1alpha1 --api-versions secrets-store.csi.x-k8s.io/v1alpha1/SecretProviderClass --api-versions secrets-store.csi.x-k8s.io/v1alpha1/SecretProviderClassPodStatus --api-versions storage.k8s.io/v1 --api-versions storage.k8s.io/v1/CSIDriver --api-versions storage.k8s.io/v1/CSINode --api-versions storage.k8s.io/v1/CSIStorageCapacity --api-versions storage.k8s.io/v1/StorageClass --api-versions storage.k8s.io/v1/VolumeAttachment --api-versions uplink.inlets.dev/v1alpha1 --api-versions uplink.inlets.dev/v1alpha1/Tunnel --api-versions v1 --api-versions v1/ConfigMap --api-versions v1/Endpoints --api-versions v1/Event --api-versions v1/LimitRange --api-versions v1/Namespace --api-versions v1/Node --api-versions v1/PersistentVolume --api-versions v1/PersistentVolumeClaim --api-versions v1/Pod --api-versions v1/PodTemplate --api-versions v1/ReplicationController --api-versions v1/ResourceQuota --api-versions v1/Secret --api-versions v1/Service --api-versions v1/ServiceAccount --api-versions velero.io/v1 --api-versions velero.io/v1/Backup --api-versions velero.io/v1/BackupRepository --api-versions velero.io/v1/BackupStorageLocation --api-versions velero.io/v1/DeleteBackupRequest --api-versions velero.io/v1/DownloadRequest --api-versions velero.io/v1/PodVolumeBackup --api-versions velero.io/v1/PodVolumeRestore --api-versions velero.io/v1/Restore --api-versions velero.io/v1/Schedule --api-versions velero.io/v1/ServerStatusRequest --api-versions velero.io/v1/VolumeSnapshotLocation --api-versions velero.io/v2alpha1 --api-versions velero.io/v2alpha1/DataDownload --api-versions velero.io/v2alpha1/DataUpload --api-versions vpcresources.k8s.aws/v1alpha1 --api-versions vpcresources.k8s.aws/v1alpha1/CNINode --api-versions vpcresources.k8s.aws/v1beta1 --api-versions vpcresources.k8s.aws/v1beta1/SecurityGroupPolicy --include-crds` failed exit status 1: Error: An error occurred while checking for chart dependencies. You may need to run `helm dependency build` to fetch missing dependencies: found in Chart.yaml, but missing in charts/ directory: my-helm-internal, apisix-dashboard" execID=6f97c
time="2024-07-24T08:59:03Z" level=info msg=Trace args="[helm template . --name-template xxxxx-xxxx-shared-services --namespace yyyy-xxxxx-xxxx-svc --kube-version 1.28 --api-versions admissionregistration.k8s.io/v1 --api-versions admissionregistration.k8s.io/v1/MutatingWebhookConfiguration --api-versions admissionregistration.k8s.io/v1/ValidatingWebhookConfiguration --api-versions apiextensions.k8s.io/v1 --api-versions apiextensions.k8s.io/v1/CustomResourceDefinition --api-versions apiregistration.k8s.io/v1 --api-versions apiregistration.k8s.io/v1/APIService --api-versions apisix.apache.org/v2 --api-versions apisix.apache.org/v2/ApisixClusterConfig --api-versions apisix.apache.org/v2/ApisixConsumer --api-versions apisix.apache.org/v2/ApisixGlobalRule --api-versions apisix.apache.org/v2/ApisixPluginConfig --api-versions apisix.apache.org/v2/ApisixRoute --api-versions apisix.apache.org/v2/ApisixTls --api-versions apisix.apache.org/v2/ApisixUpstream --api-versions apisix.apache.org/v2beta3 --api-versions apisix.apache.org/v2beta3/ApisixClusterConfig --api-versions apisix.apache.org/v2beta3/ApisixConsumer --api-versions apisix.apache.org/v2beta3/ApisixPluginConfig --api-versions apisix.apache.org/v2beta3/ApisixRoute --api-versions apisix.apache.org/v2beta3/ApisixTls --api-versions apisix.apache.org/v2beta3/ApisixUpstream --api-versions apps/v1 --api-versions apps/v1/ControllerRevision --api-versions apps/v1/DaemonSet --api-versions apps/v1/Deployment --api-versions apps/v1/ReplicaSet --api-versions apps/v1/StatefulSet --api-versions argoproj.io/v1alpha1 --api-versions argoproj.io/v1alpha1/AppProject --api-versions argoproj.io/v1alpha1/Application --api-versions argoproj.io/v1alpha1/EventBus --api-versions argoproj.io/v1alpha1/EventSource --api-versions argoproj.io/v1alpha1/Sensor --api-versions autoscaling/v1 --api-versions autoscaling/v1/HorizontalPodAutoscaler --api-versions autoscaling/v2 --api-versions autoscaling/v2/HorizontalPodAutoscaler --api-versions batch/v1 --api-versions batch/v1/CronJob --api-versions batch/v1/Job --api-versions bitnami.com/v1alpha1 --api-versions bitnami.com/v1alpha1/SealedSecret --api-versions certificates.k8s.io/v1 --api-versions certificates.k8s.io/v1/CertificateSigningRequest --api-versions coordination.k8s.io/v1 --api-versions coordination.k8s.io/v1/Lease --api-versions crd.k8s.amazonaws.com/v1alpha1 --api-versions crd.k8s.amazonaws.com/v1alpha1/ENIConfig --api-versions discovery.k8s.io/v1 --api-versions discovery.k8s.io/v1/EndpointSlice --api-versions elbv2.k8s.aws/v1alpha1 --api-versions elbv2.k8s.aws/v1alpha1/TargetGroupBinding --api-versions elbv2.k8s.aws/v1beta1 --api-versions elbv2.k8s.aws/v1beta1/IngressClassParams --api-versions elbv2.k8s.aws/v1beta1/TargetGroupBinding --api-versions events.k8s.io/v1 --api-versions events.k8s.io/v1/Event --api-versions flowcontrol.apiserver.k8s.io/v1beta2 --api-versions flowcontrol.apiserver.k8s.io/v1beta2/FlowSchema --api-versions flowcontrol.apiserver.k8s.io/v1beta2/PriorityLevelConfiguration --api-versions flowcontrol.apiserver.k8s.io/v1beta3 --api-versions flowcontrol.apiserver.k8s.io/v1beta3/FlowSchema --api-versions flowcontrol.apiserver.k8s.io/v1beta3/PriorityLevelConfiguration --api-versions helm.fluxcd.io/v1 --api-versions helm.fluxcd.io/v1/HelmRelease --api-versions networking.k8s.aws/v1alpha1 --api-versions networking.k8s.aws/v1alpha1/PolicyEndpoint --api-versions networking.k8s.io/v1 --api-versions networking.k8s.io/v1/Ingress --api-versions networking.k8s.io/v1/IngressClass --api-versions networking.k8s.io/v1/NetworkPolicy --api-versions node.k8s.io/v1 --api-versions node.k8s.io/v1/RuntimeClass --api-versions policy/v1 --api-versions policy/v1/PodDisruptionBudget --api-versions postgresql.cnpg.io/v1 --api-versions postgresql.cnpg.io/v1/Backup --api-versions postgresql.cnpg.io/v1/Cluster --api-versions postgresql.cnpg.io/v1/Pooler --api-versions postgresql.cnpg.io/v1/ScheduledBackup --api-versions rbac.authorization.k8s.io/v1 --api-versions rbac.authorization.k8s.io/v1/ClusterRole --api-versions rbac.authorization.k8s.io/v1/ClusterRoleBinding --api-versions rbac.authorization.k8s.io/v1/Role --api-versions rbac.authorization.k8s.io/v1/RoleBinding --api-versions scheduling.k8s.io/v1 --api-versions scheduling.k8s.io/v1/PriorityClass --api-versions secrets-store.csi.x-k8s.io/v1 --api-versions secrets-store.csi.x-k8s.io/v1/SecretProviderClass --api-versions secrets-store.csi.x-k8s.io/v1/SecretProviderClassPodStatus --api-versions secrets-store.csi.x-k8s.io/v1alpha1 --api-versions secrets-store.csi.x-k8s.io/v1alpha1/SecretProviderClass --api-versions secrets-store.csi.x-k8s.io/v1alpha1/SecretProviderClassPodStatus --api-versions storage.k8s.io/v1 --api-versions storage.k8s.io/v1/CSIDriver --api-versions storage.k8s.io/v1/CSINode --api-versions storage.k8s.io/v1/CSIStorageCapacity --api-versions storage.k8s.io/v1/StorageClass --api-versions storage.k8s.io/v1/VolumeAttachment --api-versions uplink.inlets.dev/v1alpha1 --api-versions uplink.inlets.dev/v1alpha1/Tunnel --api-versions v1 --api-versions v1/ConfigMap --api-versions v1/Endpoints --api-versions v1/Event --api-versions v1/LimitRange --api-versions v1/Namespace --api-versions v1/Node --api-versions v1/PersistentVolume --api-versions v1/PersistentVolumeClaim --api-versions v1/Pod --api-versions v1/PodTemplate --api-versions v1/ReplicationController --api-versions v1/ResourceQuota --api-versions v1/Secret --api-versions v1/Service --api-versions v1/ServiceAccount --api-versions velero.io/v1 --api-versions velero.io/v1/Backup --api-versions velero.io/v1/BackupRepository --api-versions velero.io/v1/BackupStorageLocation --api-versions velero.io/v1/DeleteBackupRequest --api-versions velero.io/v1/DownloadRequest --api-versions velero.io/v1/PodVolumeBackup --api-versions velero.io/v1/PodVolumeRestore --api-versions velero.io/v1/Restore --api-versions velero.io/v1/Schedule --api-versions velero.io/v1/ServerStatusRequest --api-versions velero.io/v1/VolumeSnapshotLocation --api-versions velero.io/v2alpha1 --api-versions velero.io/v2alpha1/DataDownload --api-versions velero.io/v2alpha1/DataUpload --api-versions vpcresources.k8s.aws/v1alpha1 --api-versions vpcresources.k8s.aws/v1alpha1/CNINode --api-versions vpcresources.k8s.aws/v1beta1 --api-versions vpcresources.k8s.aws/v1beta1/SecurityGroupPolicy --include-crds]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services operation_name="exec helm" time_ms=77.917705
time="2024-07-24T08:59:03Z" level=info msg="helm registry login docker.io/myorganization --username ****** --password ******" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services execID=aad32
time="2024-07-24T08:59:03Z" level=info msg=Trace args="[helm show values .]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services operation_name="exec helm" time_ms=81.08440399999999
time="2024-07-24T08:59:03Z" level=info msg="finished unary call with code OK" grpc.code=OK grpc.method=GetAppDetails grpc.service=repository.RepoServerService grpc.start_time="2024-07-24T08:59:02Z" grpc.time_ms=935.876 span.kind=server system=grpc
time="2024-07-24T08:59:03Z" level=info msg=Trace args="[helm registry login docker.io/myorganization --username ****** --password ******" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services operation_name="exec helm" time_ms=260.989906
time="2024-07-24T08:59:03Z" level=info msg="helm repo add https:--charts.apiseven.com https://charts.apiseven.com" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services execID=1119c
time="2024-07-24T08:59:05Z" level=info msg=Trace args="[helm repo add https:--charts.apiseven.com https://charts.apiseven.com]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services operation_name="exec helm" time_ms=1122.610595
time="2024-07-24T08:59:05Z" level=info msg="helm dependency build" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services execID=7f152
time="2024-07-24T08:59:06Z" level=error msg="`helm dependency build` failed exit status 1: Error: could not download oci://docker.io/myorganization/my-helm-internal: pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed" execID=7f152
time="2024-07-24T08:59:06Z" level=info msg=Trace args="[helm dependency build]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services operation_name="exec helm" time_ms=941.87085
time="2024-07-24T08:59:06Z" level=info msg="helm registry logout docker.io/myorganization" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services execID=0de16
time="2024-07-24T08:59:06Z" level=info msg=Trace args="[helm registry logout docker.io/myorganization]" dir=/tmp/_argocd-repo/125db97e-1e89-4f2a-bd25-4c3327a69d8e/app/charts/shared-services operation_name="exec helm" time_ms=66.762895
time="2024-07-24T08:59:06Z" level=error msg="finished unary call with code Unknown" error="`helm dependency build` failed exit status 1: Error: could not download oci://docker.io/myorganization/my-helm-internal: pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed" grpc.code=Unknown grpc.method=GenerateManifest grpc.service=repository.RepoServerService grpc.start_time="2024-07-24T08:59:02Z" grpc.time_ms=3315.549 span.kind=server system=grpc
time="2024-07-24T08:59:13Z" level=info msg="finished unary call with code OK" grpc.code=OK grpc.method=Check grpc.service=grpc.health.v1.Health grpc.start_time="2024-07-24T08:59:13Z" grpc.time_ms=0.022 span.kind=server system=grpc
time="2024-07-24T08:59:17Z" level=info msg="manifest cache hit: &ApplicationSource{RepoURL:git@github.com:radiantlogic-saas/xxxxx-xxxx.git,Path:app/charts/common-services,TargetRevision:,Helm:nil,Kustomize:nil,Directory:nil,Plugin:nil,Chart:,Ref:,}/cf908bb8fd342a4dd14c6b5889b85df32fe74105"
time="2024-07-24T08:59:17Z" level=info msg="finished unary call with code OK" grpc.code=OK grpc.method=GenerateManifest grpc.service=repository.RepoServerService grpc.start_time="2024-07-24T08:59:17Z" grpc.time_ms=33.595 span.kind=server system=grpc
time="2024-07-24T08:59:23Z" level=info msg="finished unary call with code OK" grpc.code=OK grpc.method=Check grpc.service=grpc.health.v1.Health grpc.start_time="2024-07-24T08:59:23Z" grpc.time_ms=0.023 span.kind=server system=grpc```
jmcorne commented 4 months ago

Forgot to mention that ArgoCD has been deployed with ArgoCD Helm chart.

jmcorne commented 1 month ago

Hi team,

any thoughts ?

andrii-korotkov-verkada commented 1 week ago

ArgoCD versions 2.10 and below have reached EOL. Can you upgrade and let us know if the issue is still present, please?