Environment: Single Node Openshift (SNO) v4.16 for edge sites
Helm Chart version: akv2k8s v2.7.2
Deployed using ArgoCD which is part of Openshift GitOps Operator
Somehow passing the proxy variables in the deployment using ArgoCD did not work and we got the following error. The SNO cluster has a cluster wide proxy configured but Openshift requires that individual applications implement proxy using environment variables.
Akv2k8s pod startup error when a secret object is added:
I0102 09:39:38.147960 1 worker.go:97] Error syncing key ace/conf-barauth: Failed to get secret for 'conf-barauth' from Azure Key Vault 'company-deep-test-vault': context deadline exceeded
Workaround: Only upon manually adding the "HTTP_PROXY", "HTTPS_PROXY" and "NO_PROXY" environment variables directly into the deployment "akv2k8s-controller" did it actually work.
Following is the ArgoCD app that successfully installed akv2k8s on target SNO cluster but did not add the PROXY environment variables above into the deployment "akv2k8s-controller".
Is this something you could fix in the helm chart?
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: deep-akv2k8s
namespace: openshift-gitops
annotations:
argocd.argoproj.io/sync-wave: "-2"
spec:
destination:
namespace: akv2k8s
server: 'https://api.deep.423.tst.ocp.company.com:6443'
project: default
source:
chart: akv2k8s
helm:
parameters:
- name: global.keyVaultAuth
value: environment
- name: controller.enabled
value: 'true'
- name: controller.metrics.enabled
value: 'true'
- name: env_injector.enabled
value: 'false'
- name: controller.securityContext.allowPrivilegeEscalation
value: 'false'
- name: global.env.AZURE_TENANT_ID
value: xxx
- name: global.env.AZURE_CLIENT_ID
value: xxx
- name: global.env.AZURE_CLIENT_SECRET
value: xxx
- name: global.httpProxy
value: http://internetproxy.company.com:8080
- name: global.httpsProxy
value: http://internetproxy.company.com:8080
- name: global.noProxy
value: .cluster.local,.svc,.company.com,10.0.0.0/8,10.128.0.0/14,127.0.0.1,172.30.0.0/16,192.168.0.0/16,192.168.30.0/23,api-int.deep.423.tst.ocp.company.com,localhost
releaseName: akv2k8s
repoURL: 'https://charts.spvapi.no'
targetRevision: 2.7.2
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
- Replace=true
Environment: Single Node Openshift (SNO) v4.16 for edge sites
Helm Chart version: akv2k8s v2.7.2
Deployed using ArgoCD which is part of Openshift GitOps Operator
Somehow passing the proxy variables in the deployment using ArgoCD did not work and we got the following error. The SNO cluster has a cluster wide proxy configured but Openshift requires that individual applications implement proxy using environment variables.
Akv2k8s pod startup error when a secret object is added:
I0102 09:39:38.147960 1 worker.go:97] Error syncing key ace/conf-barauth: Failed to get secret for 'conf-barauth' from Azure Key Vault 'company-deep-test-vault': context deadline exceededWorkaround: Only upon manually adding the "HTTP_PROXY", "HTTPS_PROXY" and "NO_PROXY" environment variables directly into the deployment "akv2k8s-controller" did it actually work.
Following is the ArgoCD app that successfully installed akv2k8s on target SNO cluster but did not add the PROXY environment variables above into the deployment "akv2k8s-controller".
Is this something you could fix in the helm chart?