ClussterIssuer could not be intalled via ArogCD, and it is always marked as missing

[wofr]

If you are trying to resolve an environment-specific issue or have a one-off question about the edge case that does not require a feature then please consider asking a question in argocd slack channel.

Checklist:

• [x ] I've searched in the docs and FAQ for my answer: https://bit.ly/argocd-faq.
• I've included steps to reproduce the bug.
• [ x] I've pasted the output of argocd version.

Describe the bug
I tried to do my deplyoment with Arog-CD. Part of my deplyoment is an ClusterIssuer (certificate-manger).
The "installation" only works if I remove the cluster-issuer form the deployment (checkbox ui-argocd).
The installation of the "ClusterIssuer" fails with the message cert-manager.io/v1/ClusterIssuer default cluster-issuer-device-simu SyncFailed Resource cert-manager.io:ClusterIssuer is not permitted in project XYC.

When I do deploy it with kubectl manually it works fine and even in the argo-CD the Live-Manifest is shown what was not the case before I manually installed the ClusterIssuer. The ClusterIssuer is still marked as missing the Argo-CD UI, of course running updates (syncs) is not possible for this ressource

To Reproduce

I deleted the deplyoment an started from scratch, the same issue is comming up

Expected behavior

I would expect the the cluster-issuer could also be installed with Argo-Cd

Screenshots

Version

Argo CD: v2.2.2+03b17e0
Helm: v3.7.1+g1d11fcb
kubectl: v0.22.2
K8 Server Version: version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.5-gke.1302", GitCommit:"639f3a74abf258418493e9b75f2f98a08da29733", GitTreeState:"clean", BuildDate:"2021-10-21T21:35:48Z", GoVersion:"go1.16.7b7", Compiler:"gc", Platform:"linux/amd64"}

Logs

ClusterIssuer" fails with  the message `cert-manager.io/v1/ClusterIssuer` default cluster-issuer-device-simu  SyncFailed Resource cert-manager.io:ClusterIssuer is not permitted in project XYC

[grebenaha]

I have Argo CD v2.4.6+a48bca0
Go to Settings->Projects, select your project name
Go down to the CLUSTER RESOURCE ALLOW LIST and click Edit
Add Kind ClusterIssuer - see my screenshot