rpc error: code = Internal desc = unable to check existing ApplicationSet details: applicationsets.argoproj.io not found after first create

[AkakievKD]

Terraform Version, ArgoCD Provider Version and ArgoCD Version

Terraform version: 1.14.0
ArgoCD provider version: 7.11.2
ArgoCD version: v3.1.9+8665140

Affected Resource(s)

• argocd_application_set

Terraform Configuration Files

variable "argocd_application_set" {
  type = map(object({
    annotations                        = optional(map(string))
    labels                             = optional(map(string))
    namespace                          = optional(string, "argocd")
    go_template                        = optional(bool)
    go_template_options                = optional(set(string))
    project                            = optional(string, "default")
    template_metadata_name             = optional(string, "{{path.basename}}")
    source_repo_url                    = string
    source_target_revision             = optional(string, "main")
    source_path                        = string
    value_files_source_repo_url        = optional(string)
    value_files_source_ref             = optional(string)
    value_files_source_path            = optional(string)
    value_files_source_target_revision = optional(string, "HEAD")
    helm_value_files                   = optional(list(string))
    destination_server                 = string
    destination_namespace              = optional(string)
    sync_options                       = optional(list(string))

    git = optional(list(object({
      repo_url          = string
      path_param_prefix = optional(string)
      revision          = optional(string)
      values            = optional(map(string))

      directory = optional(list(object({
        path    = string
        exclude = optional(bool)
      })), [])

      file = optional(list(object({
        path = string
      })), [])
    })), [])

    parameter = optional(list(object({
      name  = optional(string)
      value = optional(string)
    })), [])

    sync_policy_automated = optional(object({
      prune     = optional(bool)
      self_heal = optional(bool)
    }), null)
  }))
  default = {}
}

resource "argocd_application_set" "application_set" {
  for_each = { for key, value in var.argocd_application_set : key => value }

  metadata {
    name        = each.key
    namespace   = each.value.namespace
    labels      = each.value.labels
    annotations = each.value.annotations
  }

  spec {
    go_template         = each.value.go_template
    go_template_options = each.value.go_template_options

    generator {
      dynamic "git" {
        for_each = each.value.git
        content {
          repo_url          = git.value.repo_url
          revision          = git.value.revision
          path_param_prefix = git.value.path_param_prefix
          values            = git.value.values

          dynamic "directory" {
            for_each = git.value.directory
            content {
              path    = directory.value.path
              exclude = directory.value.exclude
            }
          }

          dynamic "file" {
            for_each = git.value.file
            content {
              path = file.value.path
            }
          }
        }
      }
    }

    template {
      metadata {
        name = each.value.template_metadata_name
      }

      spec {
        project = each.value.project

        sync_policy {
          dynamic "automated" {
            for_each = each.value.sync_policy_automated != null ? [each.value.sync_policy_automated] : []
            content {
              prune     = automated.value.prune
              self_heal = automated.value.self_heal
            }
          }
          sync_options = each.value.sync_options
        }

        source {
          repo_url        = each.value.source_repo_url
          target_revision = each.value.source_target_revision
          path            = each.value.source_path

          helm {
            dynamic "parameter" {
              for_each = each.value.parameter
              content {
                name  = parameter.value.name
                value = parameter.value.value
              }
            }

            value_files = each.value.helm_value_files
          }
        }

        source {
          repo_url        = each.value.value_files_source_repo_url
          target_revision = each.value.value_files_source_target_revision
          ref             = each.value.value_files_source_ref
          path            = each.value.value_files_source_path
        }

        destination {
          server    = each.value.destination_server
          namespace = each.value.destination_namespace
        }
      }
    }
  }
}


module "argocd-resources" {
  source     = "../modules/devops/argocd"
  depends_on = [module.argocd-basic-resources]

  argocd_application = {
    "prod-pm" = {
      project                            = "pm"
      namespace                          = "appset-argocd-prod-sbermobile"
      source_repo_url                    = "https://gitlab.sb-tel.local/devops/helm-chart.git"
      source_path                        = "."
      helm_value_files                   = ["$values/values/prod/{{path.basename}}/values.yaml"]
      value_files_source_repo_url        = "https://gitlab.sb-tel.local/pm/kube-values.git"
      value_files_source_ref             = "values"
      value_files_source_target_revision = "master"
      destination_server                 = var.k8s_prod_server
      destination_namespace              = "prod-pm"
      source_target_revision             = "master"

      git = [{
        repo_url = "https://gitlab.sb-tel.local/pm/kube-values.git"
        revision = "master"

        directory = [{
          path = "values/prod/*"
        }]
      }]

      sync_policy_automated = {
        prune     = false
        self_heal = false
      }
    },
  }
}

Panic Output

│ Error: failed to update application set prod-pm
│
│   with module.argocd-resources.argocd_application_set.application_set["prod-pm"],
│   on ..\modules\devops\argocd\application-set.tf line 1, in resource "argocd_application_set" "application_set":
│    1: resource "argocd_application_set" "application_set" {
│
│ rpc error: code = Internal desc = unable to check existing ApplicationSet details: applicationsets.argoproj.io "prod-pm" not found

Steps to Reproduce

create resorce in another namespace and change it

Expected Behavior

it works correct

Actual Behavior

I don't know why, but when I try to change an Application Set created via terraform in a different namespace, I get the error described above, but when I create a resource for the first time, everything goes well, but I get this error when I try to change the same resource that was successfully created.

Important Factoids

I'll repeat once again, this resource is created successfully and absolutely correctly. The error only occurs when I try to change this resource through terraform.

[the-technat]

@AkakievKD this seems to be a duplicate of #658. We just released v7.12.0 that includes the client-lib update to Argo CD v3.2.0. Could you check if this version solves your issue?

[AkakievKD]

This release fixed a bug only in the argocd_cluster resource where TLS certificates were not synchronized.

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.argocd-resources.argocd_application_set.application_set["dev-cdm"] will be updated in-place
  ~ resource "argocd_application_set" "application_set" {
        id = "dev-cdm:argocd"

      ~ metadata {
          ~ labels           = {
              - "k8slens-edit-resource-version" = "v1alpha1" -> null
            }
            name             = "dev-cdm"
            # (5 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.argocd-resources.argocd_application_set.application_set["prod-pm"] will be updated in-place
  ~ resource "argocd_application_set" "application_set" {
        id = "prod-pm:appset-argocd-prod-sbermobile"

      ~ spec {
            # (3 unchanged attributes hidden)

          ~ template {
              ~ spec {
                    # (2 unchanged attributes hidden)

                  ~ sync_policy {
                        # (1 unchanged attribute hidden)

                      - automated {
                          - allow_empty = false -> null
                          - prune       = true -> null
                          - self_heal   = true -> null
                        }
                    }

                    # (3 unchanged blocks hidden)
                }

                # (1 unchanged block hidden)
            }

            # (1 unchanged block hidden)
        }

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.
╷
│ Warning: Value for undeclared variable
│
│ The root module does not declare a variable named "k8s_devops_sb_tel_local_tls_crt" but a value was found in file ".secrets.auto.tfvars". If you meant to use this value, add a "variable" block to the configuration.  
│
│ To silence these warnings, use TF_VAR_... environment variables to provide certain "global" settings to all configurations in your organization. To reduce the verbosity of these warnings, use the -compact-warnings   
│ option.
╵
╷
│ Warning: Value for undeclared variable
│
│ The root module does not declare a variable named "helm_repo_private_pass" but a value was found in file ".secrets.auto.tfvars". If you meant to use this value, add a "variable" block to the configuration.
│
│ To silence these warnings, use TF_VAR_... environment variables to provide certain "global" settings to all configurations in your organization. To reduce the verbosity of these warnings, use the -compact-warnings   
│ option.
╵
╷
│ Warning: Values for undeclared variables
│
│ In addition to the other similar warnings shown, 13 other variable(s) defined without being declared.
╵

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

module.argocd-resources.argocd_application_set.application_set["dev-cdm"]: Modifying... [id=dev-cdm:argocd]
module.argocd-resources.argocd_application_set.application_set["prod-pm"]: Modifying... [id=prod-pm:appset-argocd-prod-sbermobile]
module.argocd-resources.argocd_application_set.application_set["dev-cdm"]: Modifications complete after 1s [id=dev-cdm:argocd]
╷
│ Error: failed to update application set prod-pm
│
│   with module.argocd-resources.argocd_application_set.application_set["prod-pm"],
│   on ..\modules\devops\argocd\application-set.tf line 1, in resource "argocd_application_set" "application_set":
│    1: resource "argocd_application_set" "application_set" {
│
│ rpc error: code = Internal desc = unable to check existing ApplicationSet details: applicationsets.argoproj.io "prod-pm" not found

[AkakievKD]

@the-technat test it please