iits-consulting / terraform-argocd-bootstrap

Easy way to bootstrap ArgoCD into your Kubernetes Cluster
Apache License 2.0
5 stars 5 forks source link

ArgoCD Version 5.6.5 and OTC CCE v1.23 are not compatible? #6

Closed Pascal-Orthopy closed 1 year ago

Pascal-Orthopy commented 1 year ago

Hi,

after using the ArgoCD Terraform module (5.6.5) we have problems with ArgoCD and the registry-creds in our OTC CCE v1.23.

ArgoCD

Here the problem is that ArgoCD chart of the latest version can not establish connection with GitHub, which is a known problem (https://github.com/argoproj/argo-cd/issues/10490 and https://github.com/argoproj/argo-cd/issues/9809#issuecomment-1298785315). To fix it one should delete seccompProfile from argocd-server deployment.

Registry-Creds

The problem here is that the default role for service account needs lease access to be able to start the operator. This could be fixed by adding

- apiGroups:
  - coordination.k8s.io
  resources:
  - leases
  verbs:
  - create
  - get
  - list
  - update

to role rules.

Are these Problem known and are there solutions? Maybe we have missed some configuration?

Greets

Lyian commented 1 year ago

Hi @Pascal-Orthopy, thanks alot for notifying us.

We are aware of this issue and we are going to fix it soon. For the time beeing, please use latest working version.

For the time being you can also replace

seccompProfile:
   type: Unconfined   

Greetings!

Pascal-Orthopy commented 1 year ago

@Lyian Thanks for the reply and the possible workaround 👍.

victorgetz commented 1 year ago

We added the temp fix here: https://github.com/iits-consulting/charts/releases/tag/argocd-5.30.1-repo-server-fix