Uploaded image for project: 'OpenShift GitOps'
  1. OpenShift GitOps
  2. GITOPS-5401

ApplicationSet controller cannot access appprojects

XMLWordPrintable

    • 3
    • False
    • None
    • False
    • Hide
      Before this update, the ApplicationSet Controller was missing `list` and `watch` permissions for the AppProject resource, causing failures when generating applications with the Git generator. This update fixes the issue by providing the required permissions to the ApplicationSet Controller role.
      Show
      Before this update, the ApplicationSet Controller was missing `list` and `watch` permissions for the AppProject resource, causing failures when generating applications with the Git generator. This update fixes the issue by providing the required permissions to the ApplicationSet Controller role.
    • 3

      Description of problem:

      When configuring the appset controller with ArgoCD 2.12.0, the controller fails to create applications because the service account does not have permission to list or watch AppProjects
       

      level=info msg="listed ApplicationSets" count=1 type=createSecretEventHandler  
7 reflector.go:539] pkg/mod/k8s.io/client-go@v0.29.6/tools/cache/reflector.go:229: failed to list *v1alpha1.AppProject:appprojects.argoproj.io is forbidden: User "system:serviceaccount:argocd:example-applicationset-controller" cannot list resource "appprojects" in API group "argoproj.io" in the namespace "argocd"
7 reflector.go:147] pkg/mod/k8s.io/client-go@v0.29.6/tools/cache/reflector.go:229: Failed to watch *v1alpha1.AppProject: failed to list *v1alpha1.AppProject: appprojects.argoproj.io is forbidden: User "system:serviceaccount:argocd:example-applicationset-controller" cannot list resource "appprojects" in API group "argoproj.io" in the namespace "argocd"

      More details: https://github.com/argoproj-labs/argocd-operator/issues/1514 

      Prerequisites (if any, like setup, operators/versions):

      Steps to Reproduce

      https://github.com/argoproj-labs/argocd-operator/issues/1514 

      Actual results:

      Expected results:

      Reproducibility (Always/Intermittent/Only Once):

      Acceptance criteria: 

       

      Definition of Done:

      Build Details:

      Additional info (Such as Logs, Screenshots, etc):

       

       *

            rh-ee-sghadi Siddhesh Ghadi
            rh-ee-sghadi Siddhesh Ghadi
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: