Rollouts does not work on Azure Kubernetes

[sai-vishal-kumar]

Dear Team,

This is my first ever discussion on Github , please let me know if there is any standard or if any info is missing.

I am installing argo rollouts helm chart via argo-CD for enabling extra deployment options for our applications.

This is the values.yaml of the helm chart.

argo-rollouts:

  dashboard:
    enabled: true
    logging: 
      level: debug
  controller:
    replicas: 2
    logging: 
      level: debug

After the pods are UP , I try to port forward to the dashboard UI using the service and the connection crashes and after reviewing the logs of the dashboard pod there are errors regarding RBAC access permissions( added below ). I also seems that there is nothing running on the 3100 port of the dashboard as well.

Am I missing something ?

[sai-vishal-kumar]

Error messages from dashboard pod

time="2024-05-07T11:44:23Z" level=info msg="pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:169: failed to list *v1.Secret: secrets \"argo-rollouts-notification-secret\" is forbidden: User \"system:serviceaccount:argocd:argo-rollouts-dashboard\" cannot list resource \"secrets\" in API group \"\" in the namespace \"argocd\"\n"

time="2024-05-07T11:44:23Z" level=error msg="pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:169: Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"argo-rollouts-notification-secret\" is forbidden: User \"system:serviceaccount:argocd:argo-rollouts-dashboard\" cannot list resource \"secrets\" in API group \"\" in the namespace \"argocd\"\n" error="<nil>"

time="2024-05-07T11:44:23Z" level=info msg="pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:169: failed to list *v1.ConfigMap: configmaps \"argo-rollouts-notification-configmap\" is forbidden: User \"system:serviceaccount:argocd:argo-rollouts-dashboard\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"argocd\"\n"

time="2024-05-07T11:44:23Z" level=error msg="pkg/mod/k8s.io/[email protected]/tools/cache/reflector.go:169: Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"argo-rollouts-notification-configmap\" is forbidden: User \"system:serviceaccount:argocd:argo-rollouts-dashboard\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"argocd\"\n" error="<nil>"

[sai-vishal-kumar]

$kubectl -n argocd port-forward svc/argo-rollouts-dashboard 8222:3100
Forwarding from 127.0.0.1:8222 -> 3100
Forwarding from [::1]:8222 -> 3100
Handling connection for 8222
E0507 13:16:13.037686 3281639 portforward.go:413] an error occurred forwarding 8222 -> 3100: error forwarding port 3100 to pod cd8401dad2332f238a0d2075530d1c0a7e6f079d5d312449fec2b1ca44ef6f2a, uid : failed to execute portforward in network namespace "/var/run/netns/cni-faf77e8e-f7f5-5a10-72b2-953634aa6012": failed to connect to localhost:3100 inside namespace "cd8401dad2332f238a0d2075530d1c0a7e6f079d5d312449fec2b1ca44ef6f2a", IPv4: dial tcp4 127.0.0.1:3100: connect: connection refused IPv6 dial tcp6: address localhost: no suitable address found 
error: lost connection to pod

[kostis-codefresh]

It seems that Argo Rollouts doesn't have enough permissions in the cluster. Is your cluster locked down in some way? Can you verify that the required privileges are indeed available in the cluster?