SOCKS proxy secret is no longer working

[maboehm]

We just tried updating from v2.6.2 to v2.7.2 and got the following error in our GitRepositories:

  Warning  AuthenticationFailed   47s (x10 over 7m12s)  source-controller  failed to configure proxy options: secret 'flux-system/proxy-config-socks': proxy URL must use http or https scheme, got 'socks5'

This is the spec of the gitrepo:

spec:
  interval: 1m0s
  proxySecretRef:
    name: proxy-config-socks
  ref:
    branch: main
  secretRef:
    name: deploy-key-my-repo
  timeout: 60s
  url: ssh://git@github.com/org/my-repo.git

And the proxy-config-socks secret data looks roughly like this

stringData:
  address: socks5://100.10.3.25:1080
  password: secret
  username: user

I'm pretty sure the breaking change was introduced in this change fluxcd/pkg#1038 which was merged here in #1908

Using source-controller@v2.7.1 works.

[matheuscscp]

Sorry for the breakage! Will be fixed in Flux 2.7.3 soon.

[stefanprodan]

@maboehm for now the workaround is to pin source-controller image to v1.7.1 with a kustomize patch in your bootstrap repo.

[maboehm]

That's what we did 👍