Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to deploy helm-chart mimir-distributed with ArgoCD when setting any of rbac.podSecurityContext to null #8059

Open
bo0ts opened this issue May 6, 2024 · 0 comments
Labels

Comments

@bo0ts
Copy link

bo0ts commented May 6, 2024

Describe the bug

We configure rbac for mimir-distributed like this and deploy the chart through argocd.

rbac:
  create: true
  type: scc
  podSecurityContext:
    fsGroup: null
    runAsGroup: null
    runAsUser: null

and end up with the following error when the manifests are rendered by ArgoCD:

Failed to load target state: failed to generate manifest for source 1 of 1: rpc error: code = Unknown desc = Manifest generation error (cached): `helm template . --name-template mimir --namespace grafana --kube-version 1.27 --values <path to cached source>/grafana-mimir/values.yaml <api versions removed> --include-crds` failed exit status 1: Error: execution error at (mimir/charts/mimir-distributed/templates/validate.yaml:251:4): You have selected rbac.type=scc, you must set the values fsGroup, runAsGroup, runAsUser to null in rbac.podSecurityContext Use --debug flag to render out invalid YAML

This is caused by argoproj/argo-cd#15566 and is clearly an issue on the side of ArgoCD.

Could the mimir-distributed helm chart be extended with a switch to disable validation to work around this issue?

To Reproduce

  1. Try to deploy the helm chart mimir-distributed with argocd using the above settings
  2. See the error in argocd.

Environment

  • mimir-distributed 5.2.3
  • argocd 2.9.11
  • k8s v1.27.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants