Your secret is in default namespace but needs to be in argocd namespace!
# You have this (wrong):
kubectl get secret cased-cd-registry -n defaultThe manifest has namespace: default hardcoded, so your -n argocd flag was ignored. Let's find where it actually is:
# Find all cased-cd deployments across all namespaces
kubectl get deployments -A | grep cased-cdThis will show you which namespace it's in and the exact deployment name.
The issue is that the enterprise backend is trying to connect to ArgoCD over HTTPS with a self-signed cert.
# Update the enterprise deployment to use HTTP instead of HTTPS
kubectl set env deployment/cased-cd-enterprise \
ARGOCD_SERVER=http://argocd-server.argocd.svc.cluster.local \Good news: The DNS fix worked! No more DNS timeout errors. Bad news: Now getting 502 errors for a different reason.
The 502 without DNS errors means nginx can resolve the hostname but can't connect to the enterprise backend. Let's debug:
Root Cause: Nginx was hardcoded to use Docker's DNS server (127.0.0.11) which doesn't exist in Kubernetes pods. This caused all DNS lookups to fail with "Operation timed out" errors.
The Fix: Version 0.1.17 auto-detects the correct DNS resolver from /etc/resolv.conf:
| #!/bin/bash | |
| # Cased CD Enterprise - NetworkPolicy Fix v2 | |
| # This fixes DNS timeout by removing egress control (matching ArgoCD's pattern) | |
| set -e | |
| echo "=== The Problem ===" | |
| echo "ArgoCD NetworkPolicies only control Ingress, not Egress" | |
| echo "This means all ArgoCD pods have unrestricted egress (including DNS)" | |
| echo "Our first attempt tried to control egress with explicit allow rules" |
| #!/bin/bash | |
| # Cased CD Enterprise - NetworkPolicy Diagnostic & Fix | |
| # This script diagnoses and fixes DNS timeout issues caused by missing NetworkPolicies | |
| set -e | |
| echo "=== Step 1: Check for existing NetworkPolicies for cased-cd ===" | |
| echo "Expected: No results (this is the problem)" | |
| kubectl get networkpolicies -n argocd -o json | jq '.items[] | select(.spec.podSelector.matchLabels."app.kubernetes.io/name" == "cased-cd") | .metadata.name' | |
| echo "" |