cannot upgrade to 0.30.0 on macOS

[masterkain]

Describe the bug

I get an error when trying to upgrade clusters to flux 0.30.0, macOS 12.3.1, flux installed via homebrew

Steps to reproduce

✔ cloned repository
► generating component manifests
✗ component manifest generation failed: fs-security-constraint write /var/folders/ds/rk7m6qr520xfg1v0lprtzkrm0000gn/T/flux-manifests-4129662917/gotk-components.yaml: path '/var/folders/ds/rk7m6qr520xfg1v0lprtzkrm0000gn/T/flux-manifests-4129662917/gotk-components.yaml' is not in or below '/private/var/folders/ds/rk7m6qr520xfg1v0lprtzkrm0000gn/T/flux-manifests-4129662917'

Expected behavior

upgrade as usual

Screenshots and recordings

No response

OS / Distro

macOS 12.3.1

Flux version

flux: v0.30.0

Flux check

► checking prerequisites
✔ Kubernetes 1.23.6-2+2a84a218e3cd52 >=1.20.6-0
► checking controllers
✔ helm-controller: deployment ready
► ghcr.io/fluxcd/helm-controller:v0.20.1
✔ image-automation-controller: deployment ready
► ghcr.io/fluxcd/image-automation-controller:v0.22.0
✔ image-reflector-controller: deployment ready
► ghcr.io/fluxcd/image-reflector-controller:v0.17.2
✔ notification-controller: deployment ready
► ghcr.io/fluxcd/notification-controller:v0.23.4
✔ kustomize-controller: deployment ready
► ghcr.io/fluxcd/kustomize-controller:v0.24.4
✔ source-controller: deployment ready
► ghcr.io/fluxcd/source-controller:v0.24.3
✔ all checks passed

Git provider

GitHub

Container Registry provider

No response

Additional context

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[robertpcontreras-ts]

Getting the same error

[comjf]

I can confirm that a similar error appears when running flux bootstrap github. Same OS & cli version as OP.

[hiddeco]

Should be solved by updating to v0.30.1.

[mrgreyves]

Hi!
Same problem but on flux version 0.30.1
OS macOS 12.3.1
A little more information:

flux --version

flux version 0.30.1

flux check --pre

► checking prerequisites
✔ Kubernetes 1.21.5 >=1.20.6-0
✔ prerequisites checks passed

flux bootstrap ......

► connecting to https://gitlab.com
► cloning branch "main" from Git repository "https://gitlab.com/..............."
✔ cloned repository
► generating component manifests
✔ generated component manifests
✔ component manifests are up to date
✔ installed components
✔ reconciled components
► determining if source secret "flux-system/flux-system" exists
► generating source secret
► applying source secret "flux-system/flux-system"
✔ reconciled source secret
► generating sync manifests
✗ kustomization.yaml generation failed: fs-security-constraint create /var/folders/w2/zct07xy119j546gk9wk625br0000gn/T/flux-bootstrap-109930063/prod/flux-system/kustomization.yaml: path '/var/folders/w2/zct07xy119j546gk9wk625br0000gn/T/flux-bootstrap-109930063/prod/flux-system/kustomization.yaml' is not in or below '/private/var/folders/w2/zct07xy119j546gk9wk625br0000gn/T/flux-bootstrap-109930063'

Should open the issue again =)

[kallaics]

/reopen
Same issue with Fluxcd 0.30.1
First time works well, but after if I am running the flux uninstal land try to bootstrap again, then it will be reported a same issue.

OS: MacOS 12.3.1 (Monterey)
Flux version: 0.30.1
FluxCD installed via Homebrew on Mac

Command:

flux bootstrap gitlab \  
  --components-extra=image-reflector-controller,image-automation-controller \
  --hostname=<gitlab fqdn>
  --ssh-hostname=<gitlab fqdn>  \
  --owner=<gitlab group> \
  --repository=<gitlab project name> \
  --branch=master \
  --path=cluster \
  --namespace=flux-system \
  --token-auth \
  --ca-file=./CACertChain.pem \  # Internal CA
  --read-write-key

► connecting to https://<gitlab url>
► cloning branch "master" from Git repository "https://<gitlab url>"
✔ cloned repository
► generating component manifests
✔ generated component manifests
✔ component manifests are up to date
✔ installed components
✔ reconciled components
► determining if source secret "flux-system/flux-system" exists
► generating source secret
► applying source secret "flux-system/flux-system"
✔ reconciled source secret
► generating sync manifests
✗ kustomization.yaml generation failed: fs-security-constraint create /var/folders/0z/3wc1trd579j4jkjzfl2dpcvh3wgjh7/T/flux-bootstrap-585782208/cluster/flux-system/kustomization.yaml: path '/var/folders/0z/3wc1trd579j4jkjzfl2dpcvh3wgjh7/T/flux-bootstrap-585782208/cluster/flux-system/kustomization.yaml' is not in or below '/private/var/folders/0z/3wc1trd579j4jkjzfl2dpcvh3wgjh7/T/flux-bootstrap-585782208'

Flux check output:

► checking prerequisites
✔ Kubernetes 1.20.12+vmware.1 >=1.20.6-0
► checking controllers
✔ helm-controller: deployment ready
► ghcr.io/fluxcd/helm-controller:v0.21.0
✗ image-automation-controller: deployment not ready
► ghcr.io/fluxcd/image-automation-controller:v0.22.1

And nothing happens I need to push the ctrl + c to escape the command.

Thanks for the help.

[hiddeco]

@aryan9600 is working on a patch which was added for tests on macOS before to kustomize-controller. This should not take too long to get rolled out.

[kallaics]

Upgrade look works well with version 0.30.2
Thanks.