ExternalSecret is locked in degraded state

[mike-code]

For some reason ExternalSecret resource gets deadlocked with state "secret already exists". I find it hard to reproduce as this issue happens c.a. 50% of times.

I'm not sure why this happens but my wild guess was that ExternalSecret pulls a secret from external repository and argocd treats it as "not mine" so it purges it and then some race condition happens?

I've also noticed in the logs following entries, note that they appear with 1 seconds difference, perhaps it is relevant.

time="2023-05-27T23:35:55Z" level=info msg="Applying resource ExternalSecret/apikey in cluster: https://10.186.32.1:443, namespace: app-881064370-e2e"
time="2023-05-27T23:35:56Z" level=info msg="Applying resource ExternalSecret/apikey in cluster: https://10.186.32.1:443, namespace: app-881064370-e2e"

[causalbody]

Seeing a similar issue

[m0un10]

This happens very often for us too. The only way I know how to fix it is to delete the secret from ArgoCD and then instantly it goes healthy (because it recreates the secrets fine).