argocd-redis secret-init initcontainer timeout about argo-cd HOT 11 OPEN

I also encountered the same phenomenon by following stable, installed v2.11.0 and rolled back.

kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.11.0/manifests/install.yaml 

from argo-cd.

Hi,
The issue is that Argocd tries to create a secret for Redis via Kubernetes API.
the current network policy does not allow Argocd Redis sever to even contact the Kubernetes API.
as a workaround we temporarily changed the network policy for redis: argocd-redis-network-policy:
and changed to pod selector:
podSelector:
matchLabels:
app.kubernetes.io/name: argocd-redis

change the selector to something like app.kubernetes.io/name: argocd-redis-tmp

after that delete the Redis pod, it will now be able to create the secret and the system will start running.
once everything is running, revert the network policy selector (remove "-tmp").

from argo-cd.

Download install.yaml and add Kubernetes API port (in my case 16443) to network policy:

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: argocd-redis-network-policy
spec:
  egress:
    - ports:
        - port: 53
          protocol: UDP
        - port: 53
          protocol: TCP
        - port: 16443
          protocol: TCP

from argo-cd.

Same here, also rolled back to 2.11.0

from argo-cd.

Same here

from argo-cd.

same here, fixed by #18358

from argo-cd.

I have same issue with argocd-redis-ha-haproxy

from argo-cd.

We faced the same problem and also patched the argocd-redis-ha-proxy-network-policy NetworkPolicy as workaround:

  - ports:
    - port: 443
      protocol: TCP

from argo-cd.

In my case I had to use v2.11.0 and also update NetworkPolicy as above mentioned.

from argo-cd.

i had the same issue and patched the argocd-redis-network-policy Networkpolicy as @Tomasz-Marciniak suggested.

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: argocd-redis-network-policy
spec:
  egress:
    - ports:
        - port: 53
          protocol: UDP
        - port: 53
          protocol: TCP
        - port: 6443 # your kubernetes api port
          protocol: TCP
  ingress:
    - from:
        - podSelector:
            matchLabels:
              app.kubernetes.io/name: argocd-server
        - podSelector:
            matchLabels:
              app.kubernetes.io/name: argocd-repo-server
        - podSelector:
            matchLabels:
              app.kubernetes.io/name: argocd-application-controller
      ports:
        - port: 6379
          protocol: TCP
  podSelector:
    matchLabels:
      app.kubernetes.io/name: argocd-redis
  policyTypes:
    - Ingress
    - Egress
    

from argo-cd.