argocd diff --local + cmp-plugins/tanka?

[strowi]

Hi everyone,

i recently started setting up a poc for argocd with git-crypt + tanka. So far it works great via argocd-ui/cli for repositories.

Now i am trying to get a local diff working, but no success so far. Has anyone gotten sth similar working yet?

My CMP looks like this:

apiVersion: v1
kind: ConfigMap
data:
  plugin.yaml: |-
    apiVersion: "argoproj.io/v1alpha1"
    kind: "ConfigManagementPlugin"
    metadata:
      name: "tanka"
    spec:
      discover:
        fileName: "./jsonnetfile.json"
      generate:
        command:
        - "sh"
        - "-c"
        - "bin/tk show environments/${ARGOCD_ENV_TK_ENV} --dangerous-allow-redirect"
      init:
        command:
        - "sh"
        - "-c"
        - "git stash && git crypt unlock /home/argocd/cmp-server/config/gpgkey.asc"
      version: "0.1.0"

First errors were probably related to the init, since my local repo is already unlocked:

{"level":"fatal","msg":"rpc error: code = Unknown desc = plugin sidecar failed. error generating manifests in cmp: rpc error: code = Unknown desc = error generating manifests: sh -c "git stash \u0026\u0026 git crypt unlock /home/argocd/cmp-server/config/gpgkey.asc" failed exit status 128: fatal: not a git repository (or any parent up to mount point /)\nStopping at filesystem boundary (GIT_DISCOVERY_ACROSS_FILESYSTEM not set).","time":"2025-07-11T18:54:27+02:00"}

Tried multiple variants (also removing the init form the cmp completely). But still no success.. ;/

Maybe someone here has already run into this?3

regards,
strowi