argo-helm icon indicating copy to clipboard operation
argo-helm copied to clipboard

fix(argo-cd): Fix static value secret name for argocd-server ingress tls secretName

Open btwseeu78 opened this issue 2 months ago • 2 comments

Checklist:

  • [x] I have bumped the chart version according to versioning
  • [x] I have updated the documentation according to documentation
  • [x] I have updated the chart changelog with all the changes that come with this pull request according to changelog.
  • [x] Any new values are backwards compatible and/or have sensible default.
  • [x] I have signed off all my commits as required by DCO.
  • [x] My build is green (troubleshooting builds).

btwseeu78 avatar Apr 23 '24 15:04 btwseeu78

Hi @btwseeu78 thanks for the PR. Hardcoding TLS secret name was intentional for TLS termination in Argo CD server. Also all certificates in chart are using this name to support this scenario. Can I ask why do you need different name?

See here: https://argo-cd.readthedocs.io/en/stable/operator-manual/tls/#tls-certificates-used-by-argocd-server

pdrastil avatar Apr 23 '24 15:04 pdrastil

Ok so let me explain the use case first, we use external secrets operator to pull certificates for diff clusters, then kubed is used to sync across namespaces. All our certificates are shared with multiple namespaces and a specific format to easily differentiate between what certificates for what hosts.Argocd tls means we need to just create another object to store the secrets,though we already have that with a diff name. Also now we are doing it with extra-tls which does not feel right though it solves the issue.

Also what's the harm having it parameterised with a default values. Also it's personal but I'm not ok to put ca data in values file and create the secret.

btwseeu78 avatar Apr 24 '24 02:04 btwseeu78