Error Creating Execution in AI Launchpad Using Docker Registry Secret

[Cauaspinheiro]

Hi everyone,

I'm encountering an issue when trying to run an execution in AI Launchpad using a Docker Registry Secret. The workflow fails with the following error message: (secrets ommited)

{

"details": [],

"workflow_info": [

{

"exit_code": "",

"id": "e6e07ddff007de66",

"message": "...tps://***/#emissary-emissary: secrets \"[DOCKER_REGISTRY_ID]\" is forbidden: User \"system:serviceaccount:argo:argo\" cannot get resource \"secrets\" in API group \"\" in the namespace \"[NAMESPACE]\"",

"name": "e6e07ddff007de66",

"phase": "Failed",

"type": "Steps"

},

{

"exit_code": "",

"id": "e6e07ddff007de66-3229595009",

"message": "...tps://***/#emissary-emissary: secrets \"[DOCKER_REGISTRY_ID]\" is forbidden: User \"system:serviceaccount:argo:argo\" cannot get resource \"secrets\" in API group \"\" in the namespace \"[NAMESPACE]\"",

"name": "e6e07ddff007de66[0].generate-chromadb-artifact",

"phase": "Error",

"type": "Pod"

},

{

"exit_code": "",

"id": "e6e07ddff007de66-689614044",

"message": "...tps://***/#emissary-emissary: secrets \"[DOCKER_REGISTRY_ID]\" is forbidden: User \"system:serviceaccount:argo:argo\" cannot get resource \"secrets\" in API group \"\" in the namespace \"[NAMESPACE]\"",

"name": "e6e07ddff007de66[0]",

"phase": "Error",

"type": "StepGroup"

}

]

}

[MarioDeFelipe]

Hello! assuming you have verified the namespace and the secret names are correct, I would ask you to provide the Argo Workflows RBAC configuration. Argos role are key, and you will find it here https://argo-workflows.readthedocs.io/en/latest/security/, make sure you have the apiGroups, resources and verbs correctly setup, then restart the argo workflows. Also, inspect the kubernetes events with "kubectl describe workflow <workflow-name> -n <namespace>" and paste results here