Skip to content

Github rate limiting on Appset Controller causing resync storm #21887

New issue
New issue
Closed
#21936
Closed
Github rate limiting on Appset Controller causing resync storm#21887
#21936
Assignees
rumstead
Labels
bugSomething isn't workingcomponent:application-setsBulk application management related
@aburan28

Description

@aburan28
aburan28
opened on Feb 16, 2025

Checklist:

  • [ X] I've searched in the docs and FAQ for my answer: https://bit.ly/argocd-faq.
  • I've included steps to reproduce the bug.
  • [ X] I've pasted the output of argocd version.

Describe the bug
In a k8s environment that I have deployed I am noticing that the SCM generator is failing with GHE rate limits. The ApplicationSet resource is continuously updated with the github rate limit request ID on the status conditions of the resource which is further causing the controller to reconcile the resource again. This further strains our github deployment as this happens many times per second.

Will update with more details shortly.

To Reproduce

Expected behavior

If an applicationset using SCM generators fails it should back off and respect the requeueAfterSeconds parameter. Ideally the error message returned from the SCM generator is idempotent and does not pass in a unique request id that causes the ApplicationSet to be reconciled again.

Screenshots

Version
ArgoCD version 2.13.4

Paste the output from `argocd version` here.

Logs

Feb 19, 2025 @ 11:40:07.195815742	time="2025-02-19T19:40:07Z" level=debug msg="Requesting app refresh caused by object update" api-version=argoproj.io/v1alpha1 app-namespace=argo-cd app-qualified-name=argo-cd/appsets application=appsets cluster-name=in-cluster comparison-level=1 kind=ApplicationSet name=cert-manager-certificates namespace=argo-cd project=default server="https://kubernetes.default.svc"	application-controller

Feb 19, 2025 @ 11:40:07.195129453	time="2025-02-19T19:40:07Z" level=error msg="Reconciler error" ApplicationSet=argo-cd/cert-manager-certificates controller=applicationset controllerGroup=argoproj.io controllerKind=ApplicationSet error="error failed to get params for first generator in matrix generator: child generator returned an error on parameter generation: error listing repos: error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100: 403 API rate limit exceeded for installation ID X. If you reach out to GitHub Support for help, please include the request ID 232673f1-0562-4e1b-a9f0-b10b9f168d6b. [rate reset in 1m23s]" name=cert-manager-certificates namespace=argo-cd reconcileID=dfbaafdc-fb6e-4fc5-bba4-658e1ab3d85e	applicationset-controller

Feb 19, 2025 @ 11:40:07.195114381	time="2025-02-19T19:40:07Z" level=info msg="Warning: Reconciler returned both a non-zero result and a non-nil error. The result will always be ignored if the error is non-nil and the non-nil error causes reqeueuing with exponential backoff. For more details, see: https://pkg.go.dev/sigs.k8s.io/controller-runtime/pkg/reconcile#Reconciler" ApplicationSet=argo-cd/cert-manager-certificates controller=applicationset controllerGroup=argoproj.io controllerKind=ApplicationSet name=cert-manager-certificates namespace=argo-cd reconcileID=dfbaafdc-fb6e-4fc5-bba4-658e1ab3d85e	applicationset-controller

Feb 19, 2025 @ 11:40:07.194240131	time="2025-02-19T19:40:07Z" level=debug msg="Requesting app refresh caused by object update" api-version=argoproj.io/v1alpha1 app-namespace=argo-cd app-qualified-name=argo-cd/appsets application=appsets cluster-name=in-cluster comparison-level=1 kind=ApplicationSet name=cert-manager-certificates namespace=argo-cd project=default server="https://kubernetes.default.svc"	application-controller

Feb 19, 2025 @ 11:40:07.180006576	time="2025-02-19T19:40:07Z" level=error msg="error generating application from params" applicationset=argo-cd/cert-manager-certificates error="error failed to get params for first generator in matrix generator: child generator returned an error on parameter generation: error listing repos: error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100: 403 API rate limit exceeded for installation ID X. If you reach out to GitHub Support for help, please include the request ID 232673f1-0562-4e1b-a9f0-b10b9f168d6b. [rate reset in 1m23s]" generator="{nil nil nil nil nil nil &MatrixGenerator{Generators:[]ApplicationSetNestedGenerator{ApplicationSetNestedGenerator{List:nil,Clusters:nil,Git:nil,SCMProvider:&SCMProviderGenerator{Github:&SCMProviderGeneratorGithub{Organization:internal-ghe-org,API:https://internalghe.com/api/v3,TokenRef:nil,AppSecretName:argocd-repo-creds-github-enterprise-creds,AllBranches:false,},Gitlab:nil,Bitbucket:nil,BitbucketServer:nil,Gitea:nil,AzureDevOps:nil,Filters:[]SCMProviderGeneratorFilter{SCMProviderGeneratorFilter{RepositoryMatch:nil,PathsExist:[certificates project.yml],PathsDoNotExist:[],LabelMatch:*cert-manager-certificate,BranchMatch:nil,},},CloneProtocol:https,RequeueAfterSeconds:nil,Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},Values:map[string]string{},AWSCodeCommit:nil,},ClusterDecisionResource:nil,PullRequest:nil,Matrix:nil,Merge:nil,Selector:nil,Plugin:nil,},ApplicationSetNestedGenerator{List:nil,Clusters:nil,Git:&GitGenerator{RepoURL:{{ .url }},Directories:[]GitDirectoryGeneratorItem{},Files:[]GitFileGeneratorItem{GitFileGeneratorItem{Path:certificates/**/*.yaml,},},Revision:HEAD,RequeueAfterSeconds:nil,Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},PathParamPrefix:,Values:map[string]string{certificate_common_name: {{`{{ .certificate.common_name }}`}},environment: {{`{{ index .path.segments 2 }}`}},region: {{`{{ index .path.segments 3 | replace \"-\" \"\" }}`}},},},SCMProvider:nil,ClusterDecisionResource:nil,PullRequest:nil,Matrix:nil,Merge:nil,Selector:nil,Plugin:nil,},},Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},} nil nil nil}"	applicationset-controller

Feb 19, 2025 @ 11:40:07.100632833	time="2025-02-19T19:40:07Z" level=debug msg="Requesting app refresh caused by object update" api-version=argoproj.io/v1alpha1 app-namespace=argo-cd app-qualified-name=argo-cd/appsets application=appsets cluster-name=in-cluster comparison-level=1 kind=ApplicationSet name=cert-manager-certificates namespace=argo-cd project=default server="https://kubernetes.default.svc"	application-controller

Feb 19, 2025 @ 11:40:07.099909984	time="2025-02-19T19:40:07Z" level=debug msg="Requesting app refresh caused by object update" api-version=argoproj.io/v1alpha1 app-namespace=argo-cd app-qualified-name=argo-cd/appsets application=appsets cluster-name=in-cluster comparison-level=1 kind=ApplicationSet name=cert-manager-certificates namespace=argo-cd project=default server="https://kubernetes.default.svc"	application-controller

Feb 19, 2025 @ 11:40:07.099771270	time="2025-02-19T19:40:07Z" level=error msg="Reconciler error" ApplicationSet=argo-cd/cert-manager-certificates controller=applicationset controllerGroup=argoproj.io controllerKind=ApplicationSet error="error failed to get params for first generator in matrix generator: child generator returned an error on parameter generation: error listing repos: error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100: 403 API rate limit exceeded for installation ID X. If you reach out to GitHub Support for help, please include the request ID 3468b089-21da-417f-bc3f-2d4bbab3c898. [rate reset in 1m23s]" name=cert-manager-certificates namespace=argo-cd reconcileID=1d29adcb-76df-4f6b-aea6-48d65c024a35	applicationset-controller

Feb 19, 2025 @ 11:40:07.099743482	time="2025-02-19T19:40:07Z" level=info msg="Warning: Reconciler returned both a non-zero result and a non-nil error. The result will always be ignored if the error is non-nil and the non-nil error causes reqeueuing with exponential backoff. For more details, see: https://pkg.go.dev/sigs.k8s.io/controller-runtime/pkg/reconcile#Reconciler" ApplicationSet=argo-cd/cert-manager-certificates controller=applicationset controllerGroup=argoproj.io controllerKind=ApplicationSet name=cert-manager-certificates namespace=argo-cd reconcileID=1d29adcb-76df-4f6b-aea6-48d65c024a35	applicationset-controller

Feb 19, 2025 @ 11:40:07.089426830	time="2025-02-19T19:40:07Z" level=error msg="error generating application from params" applicationset=argo-cd/cert-manager-certificates error="error failed to get params for first generator in matrix generator: child generator returned an error on parameter generation: error listing repos: error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100: 403 API rate limit exceeded for installation ID X. If you reach out to GitHub Support for help, please include the request ID 3468b089-21da-417f-bc3f-2d4bbab3c898. [rate reset in 1m23s]" generator="{nil nil nil nil nil nil &MatrixGenerator{Generators:[]ApplicationSetNestedGenerator{ApplicationSetNestedGenerator{List:nil,Clusters:nil,Git:nil,SCMProvider:&SCMProviderGenerator{Github:&SCMProviderGeneratorGithub{Organization:internal-ghe-org,API:https://internalghe.com/api/v3,TokenRef:nil,AppSecretName:argocd-repo-creds-github-enterprise-creds,AllBranches:false,},Gitlab:nil,Bitbucket:nil,BitbucketServer:nil,Gitea:nil,AzureDevOps:nil,Filters:[]SCMProviderGeneratorFilter{SCMProviderGeneratorFilter{RepositoryMatch:nil,PathsExist:[certificates project.yml],PathsDoNotExist:[],LabelMatch:*cert-manager-certificate,BranchMatch:nil,},},CloneProtocol:https,RequeueAfterSeconds:nil,Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},Values:map[string]string{},AWSCodeCommit:nil,},ClusterDecisionResource:nil,PullRequest:nil,Matrix:nil,Merge:nil,Selector:nil,Plugin:nil,},ApplicationSetNestedGenerator{List:nil,Clusters:nil,Git:&GitGenerator{RepoURL:{{ .url }},Directories:[]GitDirectoryGeneratorItem{},Files:[]GitFileGeneratorItem{GitFileGeneratorItem{Path:certificates/**/*.yaml,},},Revision:HEAD,RequeueAfterSeconds:nil,Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},PathParamPrefix:,Values:map[string]string{certificate_common_name: {{`{{ .certificate.common_name }}`}},environment: {{`{{ index .path.segments 2 }}`}},region: {{`{{ index .path.segments 3 | replace \"-\" \"\" }}`}},},},SCMProvider:nil,ClusterDecisionResource:nil,PullRequest:nil,Matrix:nil,Merge:nil,Selector:nil,Plugin:nil,},},Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},} nil nil nil}"	applicationset-controller

Feb 19, 2025 @ 11:40:07.010986765	time="2025-02-19T19:40:07Z" level=debug msg="Requesting app refresh caused by object update" api-version=argoproj.io/v1alpha1 app-namespace=argo-cd app-qualified-name=argo-cd/appsets application=appsets cluster-name=in-cluster comparison-level=1 kind=ApplicationSet name=cert-manager-certificates namespace=argo-cd project=default server="https://kubernetes.default.svc"	application-controller

Feb 19, 2025 @ 11:40:07.010585804	time="2025-02-19T19:40:07Z" level=debug msg="Requesting app refresh caused by object update" api-version=argoproj.io/v1alpha1 app-namespace=argo-cd app-qualified-name=argo-cd/appsets application=appsets cluster-name=in-cluster comparison-level=1 kind=ApplicationSet name=cert-manager-certificates namespace=argo-cd project=default server="https://kubernetes.default.svc"	application-controller

Feb 19, 2025 @ 11:40:07.010549725	time="2025-02-19T19:40:07Z" level=error msg="Reconciler error" ApplicationSet=argo-cd/cert-manager-certificates controller=applicationset controllerGroup=argoproj.io controllerKind=ApplicationSet error="error failed to get params for first generator in matrix generator: child generator returned an error on parameter generation: error listing repos: error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100: 403 API rate limit exceeded for installation ID X. If you reach out to GitHub Support for help, please include the request ID 8358ef79-d47b-4d7b-95d9-54ce6ec1a1f6. [rate reset in 1m23s]" name=cert-manager-certificates namespace=argo-cd reconcileID=ea70e32e-a848-45cc-b0a5-33940e17cc6c	applicationset-controller

Feb 19, 2025 @ 11:40:07.010540655	time="2025-02-19T19:40:07Z" level=info msg="Warning: Reconciler returned both a non-zero result and a non-nil error. The result will always be ignored if the error is non-nil and the non-nil error causes reqeueuing with exponential backoff. For more details, see: https://pkg.go.dev/sigs.k8s.io/controller-runtime/pkg/reconcile#Reconciler" ApplicationSet=argo-cd/cert-manager-certificates controller=applicationset controllerGroup=argoproj.io controllerKind=ApplicationSet name=cert-manager-certificates namespace=argo-cd reconcileID=ea70e32e-a848-45cc-b0a5-33940e17cc6c	applicationset-controller

Feb 19, 2025 @ 11:40:06.996763603	time="2025-02-19T19:40:06Z" level=error msg="error generating application from params" applicationset=argo-cd/cert-manager-certificates error="error failed to get params for first generator in matrix generator: child generator returned an error on parameter generation: error listing repos: error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100: 403 API rate limit exceeded for installation ID X. If you reach out to GitHub Support for help, please include the request ID 8358ef79-d47b-4d7b-95d9-54ce6ec1a1f6. [rate reset in 1m23s]" generator="{nil nil nil nil nil nil &MatrixGenerator{Generators:[]ApplicationSetNestedGenerator{ApplicationSetNestedGenerator{List:nil,Clusters:nil,Git:nil,SCMProvider:&SCMProviderGenerator{Github:&SCMProviderGeneratorGithub{Organization:internal-ghe-org,API:https://internalghe.com/api/v3,TokenRef:nil,AppSecretName:argocd-repo-creds-github-enterprise-creds,AllBranches:false,},Gitlab:nil,Bitbucket:nil,BitbucketServer:nil,Gitea:nil,AzureDevOps:nil,Filters:[]SCMProviderGeneratorFilter{SCMProviderGeneratorFilter{RepositoryMatch:nil,PathsExist:[certificates project.yml],PathsDoNotExist:[],LabelMatch:*cert-manager-certificate,BranchMatch:nil,},},CloneProtocol:https,RequeueAfterSeconds:nil,Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},Values:map[string]string{},AWSCodeCommit:nil,},ClusterDecisionResource:nil,PullRequest:nil,Matrix:nil,Merge:nil,Selector:nil,Plugin:nil,},ApplicationSetNestedGenerator{List:nil,Clusters:nil,Git:&GitGenerator{RepoURL:{{ .url }},Directories:[]GitDirectoryGeneratorItem{},Files:[]GitFileGeneratorItem{GitFileGeneratorItem{Path:certificates/**/*.yaml,},},Revision:HEAD,RequeueAfterSeconds:nil,Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},PathParamPrefix:,Values:map[string]string{certificate_common_name: {{`{{ .certificate.common_name }}`}},environment: {{`{{ index .path.segments 2 }}`}},region: {{`{{ index .path.segments 3 | replace \"-\" \"\" }}`}},},},SCMProvider:nil,ClusterDecisionResource:nil,PullRequest:nil,Matrix:nil,Merge:nil,Selector:nil,Plugin:nil,},},Template:ApplicationSetTemplate{ApplicationSetTemplateMeta:ApplicationSetTemplateMeta{Name:,Namespace:,Labels:map[string]string{},Annotations:map[string]string{},Finalizers:[],},Spec:ApplicationSpec{Source:nil,Destination:ApplicationDestination{Server:,Namespace:,Name:,},Project:,SyncPolicy:nil,IgnoreDifferences:[]ResourceIgnoreDifferences{},Info:[]Info{},RevisionHistoryLimit:nil,Sources:[]ApplicationSource{},},},} nil nil nil}"	applicationset-controller

Feb 19, 2025 @ 11:40:06.922290171	time="2025-02-19T19:40:06Z" level=debug msg="Requesting app refresh caused by object update" api-version=argoproj.io/v1alpha1 app-namespace=argo-cd app-qualified-name=argo-cd/appsets application=appsets cluster-name=in-cluster comparison-level=1 kind=ApplicationSet name=cert-manager-certificates namespace=argo-cd project=default server="https://kubernetes.default.svc"	application-controller

Feb 19, 2025 @ 11:40:06.921326434	time="2025-02-19T19:40:06Z" level=debug msg="Requesting app refresh caused by object update" api-version=argoproj.io/v1alpha1 app-namespace=argo-cd app-qualified-name=argo-cd/appsets application=appsets cluster-name=in-cluster comparison-level=1 kind=ApplicationSet name=cert-manager-certificates namespace=argo-cd project=default server="https://kubernetes.default.svc"	application-controller

Feb 19, 2025 @ 11:40:06.921312425	time="2025-02-19T19:40:06Z" level=error msg="Reconciler error" ApplicationSet=argo-cd/cert-manager-certificates controller=applicationset controllerGroup=argoproj.io controllerKind=ApplicationSet error="error failed to get params for first generator in matrix generator: child generator returned an error on parameter generation: error listing repos: error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100: 403 API rate limit exceeded for installation ID X. If you reach out to GitHub Support for help, please include the request ID 8ef25131-9d96-4a03-a8bd-9cf2f129b8ff. [rate reset in 1m23s]" name=cert-manager-certificates namespace=argo-cd reconcileID=8f7fb943-f4e5-4339-9966-87d4ca79522c


status:
  conditions:
  - lastTransitionTime: "2025-02-19T19:51:57Z"
    message: 'error failed to get params for first generator in matrix generator:
      child generator returned an error on parameter generation: error listing repos:
      error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100:
      403 API rate limit exceeded for installation ID X. If you reach out to GitHub
      Support for help, please include the request ID 6e0fad2e-3712-480c-833e-7bfc0ca71011.
      [rate reset in 49m34s]'
    reason: ApplicationGenerationFromParamsError
    status: "True"
    type: ErrorOccurred
  - lastTransitionTime: "2025-02-19T19:51:57Z"
    message: 'error failed to get params for first generator in matrix generator:
      child generator returned an error on parameter generation: error listing repos:
      error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100:
      403 API rate limit exceeded for installation ID X. If you reach out to GitHub
      Support for help, please include the request ID 6e0fad2e-3712-480c-833e-7bfc0ca71011.
      [rate reset in 49m34s]'
    reason: ErrorOccurred
    status: "False"
    type: ParametersGenerated
  - lastTransitionTime: "2025-02-19T19:51:57Z"
    message: 'error failed to get params for first generator in matrix generator:
      child generator returned an error on parameter generation: error listing repos:
      error listing repositories for internal-ghe-org: GET https://internalghe.com/api/v3/orgs/internal-ghe-org/repos?per_page=100:
      403 API rate limit exceeded for installation ID X. If you reach out to GitHub
      Support for help, please include the request ID 6e0fad2e-3712-480c-833e-7bfc0ca71011.
      [rate reset in 49m34s]'
    reason: ApplicationGenerationFromParamsError
    status: "False"
    type: ResourcesUpToDate
  resources:


apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: cert-manager-certificates
  namespace: argo-cd
spec:
  goTemplate: true
  goTemplateOptions: ["missingkey=error"]
  generators:
    - matrix:
        generators:
          - scmProvider:
              cloneProtocol: https
              github:
                organization: internal-ghe-org
                api: https://internalghe.com/api/v3
                allBranches: false
                appSecretName: argocd-repo-creds
              filters:
                - pathsExist:
                    - certificates
                    - project.yml
                  labelMatch: cert-manager-certificate
          - git:
              repoURL: "{{ .url }}"
              revision: HEAD
              files:
                - path: "certificates/**/*.yaml"
              values:
                certificate_common_name: "{{`{{ .certificate.common_name }}`}}"
                environment: "{{`{{ index .path.segments 2 }}`}}"
                region: '{{`{{ index .path.segments 3 | replace "-" "" }}`}}'
  template:
    metadata:
      name: "certificate-{{ .values.certificate_common_name }}"
      namespace: argo-cd
      labels:
        environment: "{{ .values.environment }}"
        region: "{{ .values.region }}"
    spec:
      sources:
        - repoURL: "{{ .url }}"
          targetRevision: "{{ .branch }}"
          ref: values
        - repoURL: https://commonly-used-charts.internal-ghe.com
          chart: certificate
          targetRevision: 0.0.*
          helm:
            valueFiles:
              - "$values/{{ .path.path }}/{{ .path.filename }}"
              - "$values/project.yml"
      project: certificates
      destination:
        name: "{{ .values.region }}-prod"
        namespace: certificates
      syncPolicy:
        automated:
          allowEmpty: true
          prune: true
        syncOptions:
          - CreateNamespace=true

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingcomponent:application-setsBulk application management related

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions