permission issue in openshift

[mortya]

Tried to install the plugin for argo rollouts in openshift 4.14 and got an error:

time="2024-09-10T14:10:18Z" level=fatal msg="Failed to download plugins: failed to create plugin folder for plugin (solo-io/glooplatform): (mkdir /home/argo-rollouts/plugin-bin: permission denied)

Got it working via workaround. Sufficient to add the "privileged" scc to argo rollouts and make the deployment's pod template container be "privileged". Obviously this is not the right thing to do, but it's acceptable (somewhat) for testing. Should be fixed in the code.

[ilrudie]

Seems to be an issue with the way argo-rollouts itself handles plugins.

[ilrudie]

https://github.com/argoproj-labs/rollouts-plugin-trafficrouter-openshift

The openshift plugin suggests that you put the binary in a location where your rollouts pods would be able to access it locally rather than specifying it as http url. That might be a good way to avoid needing higher privileges to download the plugin and write it somewhere.

the doc for rollouts has similar verbiage as well