Argocd generated--dex-oauth2-proxy-client secret not found

[tppalani]

I have successfully configured application deploykf-app-of-apps application while synicing the application from one after another fro argocd UI page i got stuck to sync the following application dkf-core--deploykf-auth, both pod got failed dex and oauth.

DeployKF Version - 1.4

secret "generated--dex-oauth2-proxy-client" not found
secret "generated--dex-oauth2-proxy-client" not found

Wil you able to help me on this why the secret is not getting created as part of sample-values-0.1.4 yaml do i need to change anything to make it work ?

[tppalani]

Hi @thesuperzapper

As you requested i have used fresh cluster i don't have any work load other than deploykf. i have tried 0.1.5 as well same issue attached images

[tppalani]

[tppalani]

Hi @thesuperzapper

Dex pod logs

Istio-proxy dex pod logs

2024-09-23T17:48:35.792085Z	info	FLAG: --concurrency="2"
2024-09-23T17:48:35.792128Z	info	FLAG: --domain="deploykf-auth.svc.cluster.local"
2024-09-23T17:48:35.792138Z	info	FLAG: --help="false"
2024-09-23T17:48:35.792146Z	info	FLAG: --log_as_json="false"
2024-09-23T17:48:35.792159Z	info	FLAG: --log_caller=""
2024-09-23T17:48:35.792165Z	info	FLAG: --log_output_level="default:info"
2024-09-23T17:48:35.792171Z	info	FLAG: --log_rotate=""
2024-09-23T17:48:35.792177Z	info	FLAG: --log_rotate_max_age="30"
2024-09-23T17:48:35.792189Z	info	FLAG: --log_rotate_max_backups="1000"
2024-09-23T17:48:35.792195Z	info	FLAG: --log_rotate_max_size="104857600"
2024-09-23T17:48:35.792201Z	info	FLAG: --log_stacktrace_level="default:none"
2024-09-23T17:48:35.792222Z	info	FLAG: --log_target="[stdout]"
2024-09-23T17:48:35.792228Z	info	FLAG: --meshConfig="./etc/istio/config/mesh"
2024-09-23T17:48:35.792234Z	info	FLAG: --outlierLogPath=""
2024-09-23T17:48:35.792245Z	info	FLAG: --proxyComponentLogLevel="misc:error"
2024-09-23T17:48:35.792255Z	info	FLAG: --proxyLogLevel="warning"
2024-09-23T17:48:35.792261Z	info	FLAG: --serviceCluster="istio-proxy"
2024-09-23T17:48:35.792272Z	info	FLAG: --stsPort="0"
2024-09-23T17:48:35.792277Z	info	FLAG: --templateFile=""
2024-09-23T17:48:35.792282Z	info	FLAG: --tokenManagerPlugin="GoogleTokenExchange"
2024-09-23T17:48:35.792294Z	info	FLAG: --vklog="0"
2024-09-23T17:48:35.792300Z	info	Version 1.17.8-a781f9ee6c511d8f22140d8990c31e577b2a9676-Clean
2024-09-23T17:48:35.792467Z	warn	failed running ulimit command: 
2024-09-23T17:48:35.793378Z	info	Proxy role	ips=[100.94.26.228] type=sidecar id=dex-5bc6956f88-hx5w7.deploykf-auth domain=deploykf-auth.svc.cluster.local
2024-09-23T17:48:35.901379Z	info	Using CA istiod.istio-system.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem
2024-09-23T17:48:35.911390Z	info	ads	All caches have been synced up in 126.528388ms, marking server ready
2024-09-23T17:48:35.911812Z	info	xdsproxy	Initializing with upstream address "istiod.istio-system.svc:15012" and cluster "Kubernetes"
2024-09-23T17:48:35.911998Z	info	sds	Starting SDS grpc server
2024-09-23T17:48:35.912408Z	info	starting Http service at 127.0.0.1:15004
2024-09-23T17:48:35.916634Z	info	Pilot SAN: [istiod.istio-system.svc]
2024-09-23T17:48:35.919711Z	info	Starting proxy agent
2024-09-23T17:48:35.919787Z	info	starting
2024-09-23T17:48:35.919841Z	info	Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --allow-unknown-static-fields --log-format %Y-%m-%dT%T.%fZ	%l	envoy %n %g:%#	%v	thread=%t -l warning --component-log-level misc:error --concurrency 2]
2024-09-23T17:48:36.064863Z	info	xdsproxy	connected to upstream XDS server: istiod.istio-system.svc:15012
2024-09-23T17:48:36.125357Z	info	ads	ADS: new connection for node:dex-5bc6956f88-hx5w7.deploykf-auth-1
2024-09-23T17:48:36.129226Z	info	ads	ADS: new connection for node:dex-5bc6956f88-hx5w7.deploykf-auth-2
2024-09-23T17:48:36.153191Z	info	cache	generated new workload certificate	latency=241.391107ms ttl=23h59m59.846825752s
2024-09-23T17:48:36.153242Z	info	cache	Root cert has changed, start rotating root cert
2024-09-23T17:48:36.153258Z	info	ads	XDS: Incremental Pushing:0 ConnectedEndpoints:2 Version:
2024-09-23T17:48:36.153335Z	info	cache	returned workload trust anchor from cache	ttl=23h59m59.8466723s
2024-09-23T17:48:36.153441Z	info	cache	returned workload trust anchor from cache	ttl=23h59m59.846577708s
2024-09-23T17:48:36.153832Z	info	cache	returned workload certificate from cache	ttl=23h59m59.846176044s
2024-09-23T17:48:36.153967Z	info	ads	SDS: PUSH request for node:dex-5bc6956f88-hx5w7.deploykf-auth resources:1 size:1.1kB resource:ROOTCA
2024-09-23T17:48:36.153967Z	info	ads	SDS: PUSH request for node:dex-5bc6956f88-hx5w7.deploykf-auth resources:1 size:4.0kB resource:default
2024-09-23T17:48:36.154067Z	info	cache	returned workload trust anchor from cache	ttl=23h59m59.845938761s
2024-09-23T17:48:36.329262Z	info	Readiness succeeded in 557.894037ms
2024-09-23T17:48:36.329830Z	info	Envoy proxy is ready


dex pod
-------

Failed to load logs: container "dex" in pod "dex-5bc6956f88-hx5w7" is waiting to start: CreateContainerConfigError
Reason: BadRequest (400)


Istio-init
----------

2024-09-23T17:48:35.259418Z	info	Istio iptables environment:
ENVOY_PORT=
INBOUND_CAPTURE_PORT=
ISTIO_INBOUND_INTERCEPTION_MODE=
ISTIO_INBOUND_TPROXY_ROUTE_TABLE=
ISTIO_INBOUND_PORTS=
ISTIO_OUTBOUND_PORTS=
ISTIO_LOCAL_EXCLUDE_PORTS=
ISTIO_EXCLUDE_INTERFACES=
ISTIO_SERVICE_CIDR=
ISTIO_SERVICE_EXCLUDE_CIDR=
ISTIO_META_DNS_CAPTURE=true
INVALID_DROP=

2024-09-23T17:48:35.259480Z	info	Istio iptables variables:
PROXY_PORT=15001
PROXY_INBOUND_CAPTURE_PORT=15006
PROXY_TUNNEL_PORT=15008
PROXY_UID=1337
PROXY_GID=1337
INBOUND_INTERCEPTION_MODE=REDIRECT
INBOUND_TPROXY_MARK=1337
INBOUND_TPROXY_ROUTE_TABLE=133
INBOUND_PORTS_INCLUDE=*