ArgoCD and Gcloud Workload Identity Improvements about argo-cd HOT 6 OPEN

Hi @withnale,

I did everything you mentioned in Git support to Google Cloud Source Repos using Workload Identity
Once I am trying to add a google source repository I can see a new secrets has been added with the name repo-
Service Account in GCP has workload identity permissions and annotation has been added to "argocd-repo-server" kubernetes service account
I always get the error "error testing repository connectivity: authentication required"
Even when changed the logging level to debug Its still displays only this error in repo-server logs

BTW,
I added the repository with connection method HTTPS

what further steps I can do to debug the issue ?

from argo-cd.

what further steps I can do to debug the issue ?

It's very tricky to setup and there is next to no logging even at debug level when credentials are being used, making it especially difficult.

The first question I had was is the repo-gcloud-source secret even being pickup correctly even before it tries to associate the gcloud credential. The easiest way I found for validating this was to change the credential_source.file reference to a file that does not exist. In that event, you at least get an error in the logs telling you that it's trying to use a token file that doesn't exist.

After that, make sure you've replaced all the references such as __CLUSTER_PROJECT_ID__ with values specific to your setup.

You can always kubectl exec or kubectl debug into the pod and try some of the stuff interactively.

from argo-cd.

Can I get some feedback on this? It would be great to improve this flow.

from argo-cd.

Unfortunately I didn't get it working

from argo-cd.

No. I meant, can I get some feedback from one of the developers about whether we can get improvements to make this way easier!?

The above works for us consistently so it is possible. It's just amazingly kiunky.

from argo-cd.

Hi @withnale,

I was able to make it work :-)
My problem was that I am using branch "main" and argocd by default tried to fetch branch "master" (which is the default one)
How can I set ArgoCD to fetch the "main" branch ?
I didn't find anything on GCP side to accomplish this

from argo-cd.