Skip to content

Excessive logging of loading external server TLS certificate #23965

New issue
New issue
Closed
#24080
Closed
Excessive logging of loading external server TLS certificate#23965
#24080
Labels
bugSomething isn't workingversion:3.0Latest confirmed affected version is 3.0
@gnadaban

Description

@gnadaban
gnadaban
opened on Jul 28, 2025

Checklist:

  • I've searched in the docs and FAQ for my answer: https://bit.ly/argocd-faq.
  • I've included steps to reproduce the bug.
  • I've pasted the output of argocd version.

Describe the bug

Periodically the argocd-application-controller logs a block like 70+ lines of identical messages like this:

{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
...
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}

Never mind the fact how wasteful reloading a secret 70+ times unnecessarily is, but the fact that even the timestamps are identical causes a downstream issue where using Fluentbit+Opensearch (with Generate_ID enabled) the logging backend rejects them as duplicate, causing a constant headache.

To Reproduce

Use external TLS certificate with ArgoCD.

Expected behavior

Argocd Application Controller reloads TLS certificate excessively without checking for changes, and logs each.

Screenshots

n/a

Version

argocd: v3.0.0+e98f483
  BuildDate: 2025-05-06T14:00:23Z
  GitCommit: e98f483bfd5781df2592fef1aeed1148f150d9c9
  GitTreeState: clean
  GoVersion: go1.24.2
  Compiler: gc
  Platform: darwin/arm64
argocd-server: v3.0.0+e98f483

Logs

Paste any relevant application logs here.

{"app-namespace":"<redacted>","app-qualified-name":"<project/app redacted>","application":"<redacted>","level":"info","msg":"Refreshing app status (comparison expired, requesting refresh. reconciledAt: 2025-07-28 08:34:04 +0000 UTC, expiry: 1m0s), level (2)","project":"<redacted>","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"application":"<project/app redacted>","level":"info","msg":"Comparing app state (cluster: https://kubernetes.default.svc, namespace: <redacted>)","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"application":"<project/app redacted>","build_options_ms":0,"level":"info","manifests_ms":25,"msg":"GetRepoObjs stats","plugins_ms":0,"repo_ms":0,"time":"2025-07-28T08:35:09Z","time_ms":25}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Ignore status for all objects","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"app-namespace":"<redacted>","app-qualified-name":"<project/app redacted>","application":"<redacted>","level":"info","msg":"Skipping auto-sync: application status is Synced","project":"<redacted>","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"app-namespace":"<redacted>","app-qualified-name":"<project/app redacted>","application":"<redacted>","level":"info","msg":"Update successful","project":"<redacted>","time":"2025-07-28T08:35:09Z"}
{"app-namespace":"<redacted>","app-qualified-name":"<project/app redacted>","app_status_update_ms":0,"application":"<redacted>","auto_sync_ms":0,"compare_app_state_ms":41,"comparison-level":2,"comparison_with_nothing_ms":0,"dedup_ms":0,"dest-name":"","dest-namespace":"<redacted>","dest-server":"https://kubernetes.default.svc","diff_ms":13,"git_ms":26,"health_ms":0,"level":"info","live_ms":0,"msg":"Reconciliation completed","normalize_application_ms":0,"patch_ms":50,"persist_app_status_ms":51,"process_finalizers_ms":0,"project":"<redacted>","refresh_app_conditions_ms":0,"set_app_managed_resources_ms":17,"setop_ms":0,"settings_ms":0,"sync_ms":0,"time":"2025-07-28T08:35:09Z","time_ms":111}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}
{"app-namespace":"<redacted>","app-qualified-name":"<project/app redacted>","application":"<redacted>","level":"info","msg":"Refreshing app status (controller refresh requested), level (0)","project":"<redacted>","time":"2025-07-28T08:35:09Z"}
{"level":"info","msg":"Loading TLS configuration from secret argocd/argocd-server-tls","time":"2025-07-28T08:35:09Z"}

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingversion:3.0Latest confirmed affected version is 3.0

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions