You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When singleNamespace: false, It seems workflow-controller and server look for the existingSecret in its own namespace, but they have no permission to get it.
Related helm chart
argo-workflows
Helm chart version
0.40.10
To Reproduce
I had a secret which has the username and password of a PostgreSQL instance.
I've set up a workflow-controller and a server in argo-workflows namespace with the following values:
time="2024-07-08T08:55:12.195Z" level=info msg="Persistence configuration enabled"
time="2024-07-08T08:55:12.198Z" level=warning msg="Non-transient error: secrets "my-existing-secret" is forbidden: User "system:serviceaccount:argo-workflows:argo-workflows-workflow-controller" cannot get resource "secrets" in API group "" in the namespace "argo-workflows""
time="2024-07-08T08:55:12.198Z" level=fatal msg="Failed to update config: secrets "my-existing-secret" is forbidden: User "system:serviceaccount:argo-workflows:argo-workflows-workflow-controller" cannot get resource "secrets" in API group "" in the namespace "argo-workflows""
Stream closed EOF for argo-workflows/argo-workflows-workflow-controller-6c98cbdcf5-v9ckp (controller)
It seems {{ template "argo-workflows.controller.fullname" . }} is a clusterRole when singleNamespace: false, so
Describe the bug
When
singleNamespace: false
, It seems workflow-controller and server look for the existingSecret in its own namespace, but they have no permission to get it.Related helm chart
argo-workflows
Helm chart version
0.40.10
To Reproduce
argo-workflows
namespace with the following values:Expected behavior
The controller should be started.
Screenshots
No response
Additional context
The logs from the controller:
It seems
{{ template "argo-workflows.controller.fullname" . }}
is a clusterRole whensingleNamespace: false
, soargo-helm/charts/argo-workflows/templates/controller/workflow-controller-cluster-roles.yaml
Lines 129 to 137 in 186065e
The text was updated successfully, but these errors were encountered: