-
Notifications
You must be signed in to change notification settings - Fork 187
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
argocd vault plugin issues with helm chart not able to deploy #653
Comments
Hi, What additional settings needs to be done to have the manifest fetched and synchronised in ArgoCD? |
@Zoli8501 if you are using multi source applications and shared the folder structure with other types of deployments like pure yaml resources or kustomization files then the find command in the plugin returns values and non zero exit code and triggers the helm plugin when it should use another plugin or none. edit: changed command to return zero output and return code on missing files try to use this instead for the find command
|
@Zoli8501 lookin closer, argocd says helm command not found. is helm installed in the sidecar? |
Finally I got it.../home/argocd was ro, so it had to be mounted apart from / and rw permission was added, I will close the issue. |
Describe the bug
Using sh or bash the same error is shown by using helm chart:
$ helm dependency update
Error: cannot load irregular file /home/argocd/cmp-server/plugins/argocd-vault-plugin-helm.sock as it has file mode type bits set
$
$ helm template $ARGOCD_APP_NAME -n $ARGOCD_APP_NAMESPACE --include-crds . | argocd-vault-plugin generate -s vault-kubernetes -
Error: cannot load irregular file /home/argocd/cmp-server/plugins/argocd-vault-plugin-helm.sock as it has file mode type bits set
Vault plugin configured as sidecar:
configmap cmp-plugin:
apiVersion: v1
kind: ConfigMap
metadata:
name: cmp-plugin
namespace: argocd
data:
avp.yaml: |
apiVersion: argoproj.io/v1alpha1
kind: ConfigManagementPlugin
metadata:
name: argocd-vault-plugin
spec:
allowConcurrency: true
discover:
find:
command:
- sh
- "-c"
- "find . -name '*.yaml' | xargs -I {} grep "<path\|avp\.kubernetes\.io" {} | grep ."
generate:
command:
- argocd-vault-plugin
- generate
- "."
- "-s"
- "vault-kubernetes"
lockRepo: false
avp-helm.yaml: |
apiVersion: argoproj.io/v1alpha1
kind: ConfigManagementPlugin
metadata:
name: argocd-vault-plugin-helm
spec:
allowConcurrency: true
Expected behavior
with avp.yaml able to fetch password from vault, but deploying helm chart it is not possible.
avp-helm.yaml configuration set according to documentation.
Screenshots/Verbose output
![image](https://private-user-images.githubusercontent.com/45036857/346853922-35f24f6e-ff09-43a1-bf5f-e08988033068.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjM4NzcyNTUsIm5iZiI6MTcyMzg3Njk1NSwicGF0aCI6Ii80NTAzNjg1Ny8zNDY4NTM5MjItMzVmMjRmNmUtZmYwOS00M2ExLWJmNWYtZTA4OTg4MDMzMDY4LnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA4MTclMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwODE3VDA2NDIzNVomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTcwMGYxOTRlMGUxMGY4ZDcxNjQ1MjkxMWZiMTU4MDFmODEzNjQ1ZGRjMWViZTkzNzZlODgwZjYzY2RhMDFlYmYmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.OHkjs53t78ZJ_Od66nWmpHIrHg560A3B901xxkMv8pk)
Additional context
![image](https://private-user-images.githubusercontent.com/45036857/346854570-98ea8560-2af8-4f37-a27c-4c858c72b20f.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.BOV3REtY9sbmg_uz56S-uMu7zGelWRzL_WeS2NwWHdw)
In argocd if sync is working, the resources are not reachable, currently following error is shown:
The text was updated successfully, but these errors were encountered: