Skip to content

fix: service account for cleanup runtime resources #642

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

witalloliveira
Copy link

@witalloliveira witalloliveira commented Aug 5, 2025

What

This pull request makes a minor update to the cleanup-resources.yaml hook template by changing the serviceAccount used for the cleanup job. The new service account, runtime-cleanup, is likely more appropriate for the job's permissions and responsibilities.

  • Changed the serviceAccount in the charts/gitops-runtime/templates/hooks/pre-uninstall/cleanup-resources.yaml file from argocd-application-controller to runtime-cleanup to better align with the job's purpose.

Why

Error creating: pods "cleanup-runtime-resources-" is forbidden: error looking up service account codefresh-gitops/argocd-application-controller: serviceaccount "argocd-application-controller" not found 

codefresh-gitops mentioned in the error message above refers to a namespace.

Notes

Use case: leveraging the gitops-runtime chart for the deployment of argo-rollouts components within Managed Clusters. In this context, I disable nearly all Codefresh GitOps Runtime components in the values.yaml (including the argo-cd dependency, which is the reason the Argo Application Controller is absent) to focus exclusively on the argo-rollouts components (Argo Rollouts and its Event Reporter) on Managed Clusters connected to the Runtime.

@witalloliveira witalloliveira requested a review from a team as a code owner August 5, 2025 01:02
@witalloliveira
Copy link
Author

FYI @francisco-cocozza

@witalloliveira
Copy link
Author

/e2e

@witalloliveira
Copy link
Author

@ATGardner @scme0 Would you mind looking into why the CI workflow didn't succeed? I really appreciate it in advance.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant