Sops + gcp kms with Argocd multi source

[stephaneetje]

Hello

I'm using sops backend with gcp kms (with workload identity) with argocd and it's working perfectly for non multi source apps.

I followed the instructions, added HELM_SECRETS_VALUES_ALLOW_ABSOLUTE_PATH and HELM_SECRETS_WRAPPER_ENABLED to repoServer.

I'm getting errors related to unfound values, it looks like it is reading encrypted values. Same values file unencrypted is accepted.

I was thinking it should work outofBox as it should be called the same way for multi or non multi app (on helm secrets side i mean). But documentation about multi source only talks about GPG, so is there a possibility using KMS would not be suported ?

Environment

• Helm Secrets Version: 4.6.1
• ArgoCD Version: 2.10.7

[jkroepke]

Could you please run the following command on your argocd-repo-server?

ls -lah $(which helm)

[stephaneetje]

$ ls -lah $(which helm)
-rwxr-xr-x 1 root root 51M Sep 26 06:39 /usr/local/bin/helm

[jkroepke]

That means the helm wrapper is not active. Just set HELM_SECRETS_WRAPPER_ENABLED to true is not fully sufficient.

Please follow precisely the documentation at https://github.com/jkroepke/helm-secrets/wiki/ArgoCD-Integration#step-1-customize-argocd-repo-server.

At the end, a /usr/local/sbin/helm file should exists and it should be a shell script.

[stephaneetje]

Oh thanks!

I'm using init container, i do see how you link /usr/local/sbin/helm with the wrapper script in the Docker Documentation, but i don't find the equivalent for container init. Am i missing something?

[jkroepke]

Check volumeMount

  volumeMounts:
    - mountPath: /usr/local/sbin/helm
      subPath: helm
      name: gitops-tools

Please also check, if /usr/local/sbin/ is part of the PATH env echo $PATH

[stephaneetje]

How could i miss that, thank you so much!

[jkroepke]

Any recommendation to the docs?

[stephaneetje]

Maybe in the multi source doc i would add in requirements that /usr/local/sbin must be a symlink to helm-wrapper.sh.

[jkroepke]

@stephaneetje I saw you post on the ArgoCD issue as well. Would mind to link to solution that other people with similar issues having a solution?

Thanks!

[stephaneetje]

No problem, just did it.