Linkerd Destination and Proxy Injector forced Sync with ArgoCD

Linkerd General Discussion
1

I’m experiencing an issue with my linkerd installation via argocd continuously re-deploying the destination and proxy injector pods whenever any meshed application is synced. My ignore differences configuration is the following. Do I need to add anything else here?

ignoreDifferences:

  • jsonPointers:
    • /data/tls.crt
    • /data/tls.key
      kind: Secret
      name: linkerd-proxy-injector-k8s-tls
  • jsonPointers:
    • /data/tls.crt
    • /data/tls.key
      kind: Secret
      name: linkerd-sp-validator-k8s-tls
  • jsonPointers:
    • /data/tls.crt
    • /data/tls.key
      kind: Secret
      name: linkerd-policy-validator-k8s-tls
  • group: admissionregistration.k8s.io
    kind: MutatingWebhookConfiguration
    name: linkerd-proxy-injector-webhook-config
    jsonPointers:
    • /webhooks/0/clientConfig/caBundle
    • /webhooks/1/clientConfig/caBundle
    • /webhooks/2/clientConfig/caBundle
    • /webhooks/3/clientConfig/caBundle
    • /webhooks/4/clientConfig/caBundle
    • /webhooks/5/clientConfig/caBundle
    • /webhooks/6/clientConfig/caBundle
    • /webhooks/7/clientConfig/caBundle
  • group: admissionregistration. k8s. io
    kind: ValidatingWebhookConfiguration
    name: linkerd-sp-validator-webhook-config
    jsonPointers:
    • /webhooks/0/clientConfig/caBundle
    • /webhooks/1/clientConfig/caBundle
    • /webhooks/2/clientConfig/caBundle
    • /webhooks/3/clientConfig/caBundle
    • /webhooks/4/clientConfig/caBundle
    • /webhooks/5/clientConfig/caBundle
    • /webhooks/6/clientConfig/caBundle
    • /webhooks/7/clientConfig/caBundle
  • group: admissionregistration .k8s. io
    kind: ValidatingWebhookConfiguration
    name: linkerd-policy-validator-webhook-config
    jsonPointers:
    • /webhooks/0/clientConfig/caBundle
    • /webhooks/1/clientConfig/caBundle
    • /webhooks/2/clientConfig/caBundle
    • /webhooks/3/clientConfig/caBundle
    • /webhooks/4/clientConfig/caBundle
    • /webhooks/5/clientConfig/caBundle
    • /webhooks/6/clientConfig/caBundle
    • /webhooks/7/clientConfig/caBundle
2

Add metadata.annotations

3

@matthew.duval, when Argo forces a sync, you should be able to see what prompted it to resync (there’s a diffs view in the ArgoCD UI). Is it the annotations? or something else?

4

I believe it is the metadata annotations as Mahendran pointed out. Specifically the checksum/config seems to cause it