Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Plugin not working with directory recurse enabled #685

Open
joaorocha-ceiia opened this issue Dec 17, 2024 · 0 comments
Open

Plugin not working with directory recurse enabled #685

joaorocha-ceiia opened this issue Dec 17, 2024 · 0 comments

Comments

@joaorocha-ceiia
Copy link

Describe the bug
While testing the plugin, when applying an argocd application to my cluster, with the directory.recurse to true, the secret placeholder doesn't get replaced by the vault plugin. When I disabled the directory.recurse to false, it immediately started working as expected. I tested with multiple version (1.11.0, 1.16.1 and 1.18.1) and every time I got the same behaviour.

To Reproduce
Steps to reproduce the behavior:

  1. Apply this example of a argocd application manifest
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: vault-poc
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: test-vault
    server: https://kubernetes.default.svc
  project: default
  source:
    path: argocd-vault-plugin
    repoURL: https://github.com/TiagoMorais01/ArgoCD-Vault-Teste.git
    targetRevision: HEAD
    directory:
      recurse: true
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - Validate=true
      - CreateNamespace=true
      - PrunePropagationPolicy=foreground
      - PruneLast=true
  1. Check the value of the "mysecret" secret, applied on the "vault-poc" namespace
kubectl get secrets mysecret -n vault-poc -o jsonpath='{.data.PORT}' | base64 -d

Expected behavior
The secret gets the value of <password> instead of the actual value of the secret from the vault (e.g. 9191 or whatever value you configured on the vault)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant