无法向ArgoCD添加代码仓库：问题排查求助

我们正尝试通过ArgoCD Helm Chart（7.2.0版本）在AWS Kubernetes集群上部署高可用ArgoCD实例，基础设施由TypeScript编写的AWS CDK构建。已完成的CDK部署代码如下：

const argoCDHelmChart = this.cluster.addHelmChart('argocd-helmchart',
    {
        repository: 'https://argoproj.github.io/argo-helm',
        chart: 'argo-cd',
        version: '7.2.0',
        namespace: 'argocd',
        release: 'argo-cd',
        values: {
            "redis-ha": { enabled: true },
            controller: {
                serviceAccount: { create: false },
                replicas: 1,
                envFrom: [{ secretRef: { name: 'proxy-config' }}]
            },
            server: {
                serviceAccount: { create: false },
                autoscaling: { enabled: false, minReplicas: 1 },
                envFrom: [{ secretRef: { name: 'proxy-config' }}]
            },
            repoServer: {
                autoscaling: { enabled: false, minReplicas: 1 },
                envFrom: [{ secretRef: { name: 'proxy-config' }}]
            },
            applicationSet: {
                replicas: 1,
                extraEnvFrom: [{ secretRef: { name: 'proxy-config' }}]
            },
        },
    }
)

执行以下CLI命令添加仓库时，出现403 Forbidden错误：

argocd repo add OUR_REPO_URL --server-name argo-cd-argocd-server --username OUR_USERNAME --password OUR_PASSWORD

错误信息如下：

FATA[0000] rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing: failed to do connect handshake, response: \"HTTP/1.1 403 Forbidden\r\nContent-Length: 10\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Thu, 25 Jul 2024 13:52:19 GMT\r\nX-Content-Type-Options: nosniff\r\n\r\nForbidden\n\""

已完成的验证项 #

• 所有Pod状态健康；
• 在argocd-server/argocd-repo-server Pod内使用相同凭证可正常访问目标仓库（git ls-remote/git clone可正常执行），排除代理和凭证问题；
• 添加应用后应用状态健康，但UI显示与CLI相同的错误；
• 通过Kubernetes ConfigMap配置GitHub仓库时也出现相同错误。

当前集群中的ArgoCD Pod列表 #

• argo-cd-argocd-application-controller-0
• argo-cd-argocd-applicationset-controller-885b744c4-v7pnv
• argo-cd-argocd-dex-server-6f99bdb67d-tnf6c
• argo-cd-argocd-notifications-controller-5869f85784-pdpll
• argo-cd-argocd-redis-secret-init-vgkr6
• argo-cd-argocd-repo-server-8679c8c796-69v2q
• argo-cd-argocd-server-fcb9d7f76-9kk9j
• argo-cd-redis-ha-haproxy-7fb5cb44cc-l4c8m
• argo-cd-redis-ha-haproxy-7fb5cb44cc-twrkj
• argo-cd-redis-ha-haproxy-7fb5cb44cc-vkqrm
• argo-cd-redis-ha-server-0
• argo-cd-redis-ha-server-1
• argo-cd-redis-ha-server-2

我们怀疑argocd-server Pod无法与argocd-repo-server Pod正常通信，恳请提供问题排查方向或Pod间通信的验证方法。

内容的提问来源于stack exchange，提问作者gergokovacs711