From 1e8a7c064e2368a5239de58d2cfc36342595c472 Mon Sep 17 00:00:00 2001 From: Anand Kumar Singh Date: Tue, 9 Jun 2026 16:15:22 +0530 Subject: [PATCH 1/2] disable default instance on xKS clusters Signed-off-by: Anand Kumar Singh --- cmd/main.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/cmd/main.go b/cmd/main.go index acbe0809fad..f1242a427bf 100644 --- a/cmd/main.go +++ b/cmd/main.go @@ -223,8 +223,13 @@ func main() { registerComponentOrExit(mgr, argov1beta1api.AddToScheme) // Setup Scheme for OpenShift Config if available + var disableDefault bool + disableDefault = strings.ToLower(os.Getenv(common.DisableDefaultInstallEnvVar)) == "true" if util.IsConfigAPIFound() { registerComponentOrExit(mgr, configv1.AddToScheme) + } else { + setupLog.Info("Non-OpenShift cluster detected, disabling default Argo CD instance") + disableDefault = true } registerComponentOrExit(mgr, rolloutManagerApi.AddToScheme) @@ -257,7 +262,7 @@ func main() { if err = (&controllers.ReconcileGitopsService{ Client: client, Scheme: mgr.GetScheme(), - DisableDefaultInstall: strings.ToLower(os.Getenv(common.DisableDefaultInstallEnvVar)) == "true", + DisableDefaultInstall: disableDefault, }).SetupWithManager(mgr); err != nil { setupLog.Error(err, "unable to create controller", "controller", "GitopsService") os.Exit(1) From 2b77b2b44fccc9d63d25304fef96cbf281e9a010 Mon Sep 17 00:00:00 2001 From: Anand Kumar Singh Date: Wed, 10 Jun 2026 14:40:30 +0530 Subject: [PATCH 2/2] Dex with OpenShiftOAuth: true fails on vanilla K8s because oauth.openshift.io API doesn't exist. Gate on config.openshift.io presence before configuring SSO. assisted-by: claude-code Signed-off-by: Anand Kumar Singh --- controllers/argocd/argocd.go | 11 ++++++++++- controllers/argocd/argocd_test.go | 23 +++++++++++++++++++++++ 2 files changed, 33 insertions(+), 1 deletion(-) diff --git a/controllers/argocd/argocd.go b/controllers/argocd/argocd.go index ba7b1b41e54..084c889f667 100644 --- a/controllers/argocd/argocd.go +++ b/controllers/argocd/argocd.go @@ -21,13 +21,17 @@ import ( argoapp "github.com/argoproj-labs/argocd-operator/api/v1beta1" argoappController "github.com/argoproj-labs/argocd-operator/controllers/argocd" + "github.com/redhat-developer/gitops-operator/controllers/util" v1 "k8s.io/api/core/v1" resourcev1 "k8s.io/apimachinery/pkg/api/resource" metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" "sigs.k8s.io/controller-runtime/pkg/client" + logf "sigs.k8s.io/controller-runtime/pkg/log" "sigs.k8s.io/yaml" ) +var log = logf.Log.WithName("controller_argocd") + var ( defaultAdminPolicy = "g, system:cluster-admins, role:admin\ng, cluster-admins, role:admin\n" defaultScope = "[groups]" @@ -90,7 +94,12 @@ func getArgoDexSpec() *argoapp.ArgoCDDexSpec { } func getArgoSSOSpec(client client.Client) *argoapp.ArgoCDSSOSpec { - if argoappController.IsOpenShiftCluster() && argoappController.IsExternalAuthenticationEnabledOnCluster(context.TODO(), client) { + if !util.IsConfigAPIFound() { + log.Info("non-OpenShift cluster detected, skipping SSO/Dex configuration") + return nil + } + if argoappController.IsExternalAuthenticationEnabledOnCluster(context.TODO(), client) { + log.Info("external authentication enabled on cluster, skipping SSO/Dex configuration") return nil } return &argoapp.ArgoCDSSOSpec{ diff --git a/controllers/argocd/argocd_test.go b/controllers/argocd/argocd_test.go index 0132c53f647..8b22ad83785 100644 --- a/controllers/argocd/argocd_test.go +++ b/controllers/argocd/argocd_test.go @@ -22,6 +22,7 @@ import ( argoapp "github.com/argoproj-labs/argocd-operator/api/v1beta1" configv1 "github.com/openshift/api/config/v1" + "github.com/redhat-developer/gitops-operator/controllers/util" "gotest.tools/assert" v1 "k8s.io/api/core/v1" resourcev1 "k8s.io/apimachinery/pkg/api/resource" @@ -30,6 +31,9 @@ import ( ) func TestArgoCD(t *testing.T) { + util.SetConfigAPIFound(true) + defer util.SetConfigAPIFound(false) + scheme := runtime.NewScheme() _ = argoapp.AddToScheme(scheme) _ = configv1.AddToScheme(scheme) @@ -199,6 +203,9 @@ func TestArgoCD(t *testing.T) { } func TestDexConfiguration(t *testing.T) { + util.SetConfigAPIFound(true) + defer util.SetConfigAPIFound(false) + scheme := runtime.NewScheme() _ = argoapp.AddToScheme(scheme) _ = configv1.AddToScheme(scheme) @@ -223,3 +230,19 @@ func TestDexConfiguration(t *testing.T) { } assert.DeepEqual(t, testArgoCD.Spec.RBAC, testRBAC) } + +func TestSSOSkippedOnNonOpenShift(t *testing.T) { + util.SetConfigAPIFound(false) + + scheme := runtime.NewScheme() + _ = argoapp.AddToScheme(scheme) + _ = configv1.AddToScheme(scheme) + + fakeClient := fake.NewClientBuilder(). + WithScheme(scheme). + Build() + + testArgoCD, _ := NewCR("openshift-gitops", "openshift-gitops", fakeClient) + + assert.Assert(t, testArgoCD.Spec.SSO == nil, "SSO should be nil on non-OpenShift clusters") +}