Issue #1411 - Document private repository configuration

docs/user-guide/private-repositories.md

@@ -0,0 +1,71 @@
+# Private Repositories
+
+## Credentials
+
+If application manifests are located in private repository then repository credentials have to be configured. Argo CD supports both HTTP and SSH Git credentials.
+
+### HTTP Username And Password Credential
+
+Private repositories that require a username and password typically have a URL that start with "https://" rather than "git@" or "ssh://". 
+
+Credentials can be configured using Argo CD CLI:
+
+```bash
+argocd repo add https://github.com/argoproj/argocd-example-apps --username <username> --password <password>
+```
+
+or UI:
+
+1. Navigate to `Settings/Repositories`
+1. Click `Connect Repo` button and enter HTTP credentials
+
+![connect repo](../assets/connect_repo.png)
+
+#### Access Token
+
+Instead of using username and password you might use access token. Following instructions of your Git hosting service to generate the token:
+
+* [Github](https://help.github.com/en/articles/creating-a-personal-access-token-for-the-command-line)
+* [Gitlab](https://docs.gitlab.com/ee/user/project/deploy_tokens/)
+* [Bitbucket](https://confluence.atlassian.com/bitbucketserver/personal-access-tokens-939515499.html)
+
+Then, connect the repository using an empty string as a username and access token value as a password.
+
+### SSH Private Key Credential
+
+Private repositories that require an SSH private key have a URL that typically start with "git@" or "ssh://" rather than "https://".  
+
+The Argo CD UI don't support configuring SSH credentials. The SSH credentials can only be configured using the Argo CD CLI:
+
+```
+argocd repo add git@github.com:argoproj/argocd-example-apps.git --ssh-private-key-path ~/.ssh/id_rsa
+```
+
+## Self-Signed Certificates
+
+If you are using self-hosted Git hosting service with the self-signed certificate then you need to disable certificate validation for that Git host.
+Following options are available:
+
+Add repository using Argo CD CLI and `--insecure-ignore-host-key` flag:
+
+
+```bash
+argocd repo add git@github.com:argoproj/argocd-example-apps.git --ssh-private-key-path ~/.ssh/id_rsa
+```
+
+ The flag disables certificate validation only for specified repository.
+
+!!! warning
+    The `--insecure-ignore-host-key` flag does not work for HTTPS Git URLs. See [#1513](https://github.com/argoproj/argo-cd/issues/1513).
+
+You can add Git service hostname to the `/etc/ssh/ssh_known_hosts` in each Argo CD deployment and disables cert validation for Git SSL URLs. For more information see 
+[example](https://github.com/argoproj/argo-cd/tree/master/examples/known-hosts) which demonstrates how `/etc/ssh/ssh_known_hosts` can be customized.
+
+!!! note
+    The `/etc/ssh/ssh_known_hosts` should include Git host on each Argo CD deployment as well as on a computer where `argocd repo add` is executed. After resolving issue
+    [#1514](https://github.com/argoproj/argo-cd/issues/1514) only `argocd-repo-server` deployment has to be customized.
+
+## Declarative Configuration
+
+See [declarative setup](../operator-manual/declarative-setup#Repositories)
+

examples/known-hosts/README.md

@@ -0,0 +1,12 @@
+# Argo CD ssh_known_hosts file customization
+
+The directory contains sample kustomize application which customizes `/etc/ssh/ssh_known_hosts` file in Argo CD. This is useful if you want to disable SSL cert validation
+for Git repositories connected using SSL urls:
+
+- `argocd-known-hosts-mounts.yaml` - define merge patches which inject `/etc/ssh/ssh_known_hosts` file mount into all Argo CD deployments.
+- `argocd-known-hosts.yaml` - defines `ConfigMap` which includes `/etc/ssh/ssh_known_hosts` file content.
+- `kustomization.yaml` - Kustomize application which bundles stable version of Argo CD and apply `argocd-known-hosts-mounts.yaml` patches on top.
+
+!!! note
+    The `/etc/ssh/ssh_known_hosts` should include Git host on each Argo CD deployment as well as on a computer where `argocd repo add` is executed. After resolving issue
+    [#1514](https://github.com/argoproj/argo-cd/issues/1514) only `argocd-repo-server` deployment has to be customized.

examples/known-hosts/argocd-known-hosts-mounts.yaml

@@ -0,0 +1,54 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: argocd-server
+spec:
+  template:
+    spec:
+      containers:
+      - name: argocd-server
+        volumeMounts:
+        - name: known-hosts
+          mountPath: /etc/ssh/ssh_known_hosts
+          subPath: known_hosts
+      volumes:
+      - name: known-hosts
+        configMap:
+          name: argocd-known-hosts
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: argocd-repo-server
+spec:
+  template:
+    spec:
+      containers:
+      - name: argocd-repo-server
+        volumeMounts:
+        - name: known-hosts
+          mountPath: /etc/ssh/ssh_known_hosts
+          subPath: known_hosts
+      volumes:
+      - name: known-hosts
+        configMap:
+          name: argocd-known-hosts
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: argocd-application-controller
+spec:
+  template:
+    spec:
+      containers:
+      - name: argocd-application-controller
+        volumeMounts:
+        - name: known-hosts
+          mountPath: /etc/ssh/ssh_known_hosts
+          subPath: known_hosts
+      volumes:
+      - name: known-hosts
+        configMap:
+          name: argocd-known-hosts

examples/known-hosts/argocd-known-hosts.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-known-hosts
+data:
+  known_hosts: |-
+    <known_hosts file content>

examples/known-hosts/kustomization.yaml

@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+bases:
+- github.com/argoproj/argo-cd//manifests/cluster-install?ref=stable
+
+patchesStrategicMerge:
+- argocd-known-hosts-mounts.yaml
+
+resources:
+- argocd-known-hosts.yaml

mkdocs.yml

@@ -37,6 +37,7 @@ nav:
     - user-guide/index.md
     - user-guide/application_sources.md
     - user-guide/projects.md
+    - user-guide/private-repositories.md
     - user-guide/tool_detection.md
     - user-guide/auto_sync.md
     - user-guide/diffing.md