Skip to content

Latest commit

 

History

History
86 lines (63 loc) · 3.24 KB

ARGO_CD.md

File metadata and controls

86 lines (63 loc) · 3.24 KB
Raw

ArgoCD

In their own words:

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.

To learn more about ArgoCD visit their website

ArgoCD Helm Chart

In order to deploy ArgoCD, we will use its helm charts. They are available at the following github repo

App of Apps

The deployment of ArgoCD and Dandelion, follows the App of Apps approach.

This means that the ArgoCD will first install itself and then proceed to install all the required components.

Bootstrap

Feel free to customize the argocd-bootstrap/values-${PROVIDER}.yaml file enabling or disabling apps or networks at choice, then you can use this snippet to deploy.

-> NOTE: This snippet assumes you have htpasswd cli tool (apache2-utils package in Ubuntu), if you don't have it or can't install iy, please check section below on how to set a custom password to access ArgoCD.

cd argocd-bootstrap

APP_PROVIDER=k3s

export ARGOCD_PASSWORD=CH4NG3@M3
export ARGOCD_HASHED_PASSWORD=$(htpasswd -nbBC 10 null $ARGOCD_PASSWORD | sed 's|null:\(.*\)|\1|g')

helm dependency update
helm dependency build

helm upgrade \
    --create-namespace \
    --namespace argocd \
    --install argocd \
    --set "argo-cd.configs.secret.argocdServerAdminPassword=${ARGOCD_HASHED_PASSWORD}" \
    --set "argo-cd.configs.secret.argocdServerAdminPasswordMtime=$(date +%FT%T%Z)" \
    -f values-scaleway.yaml \
    -f values-scaleway-stakeboard.yaml \
    .

Access ArgoCD

ArgoCD requires username and password authentication. By default, at the moment of deploying ArgoCD for the first time, username is admin and password is set to the full pod name of the argocd-server. You can easily find the password and access the service by following these steps:

  • Get default username/password:
POD_NAME=$(kubectl get pod -n argocd --selector 'app.kubernetes.io/name=argocd-server' --template='{{range .items}}{{.metadata.name}}{{"\n"}}{{end}}')
echo -e "Username: admin\nPassword: ${POD_NAME}"
kubectl port-forward -n argocd ${POD_NAME} 8080:8080

Alternatively you can set the password at bootstrap time. Steps are:

  1. Generate a new password
  2. Use the bcrypt to hash the password. You can use this convenience website to do so or htpasswd from the apache2-utils suite like this:
ARGOCD_PASSWORD=CH4NG3@M3
ARGOCD_HASHED_PASSWORD=$(htpasswd -nbBC 10 null $ARGOCD_PASSWORD | sed 's|null:\(.*\)|\1|g')
  1. Specify the password when bootstrapping the cluster by replacing argo-cd.configs.secret.argocdServerAdminPassword hash:
helm upgrade \
    --create-namespace \
    --namespace argocd \
    --install argocd \
    --set "argo-cd.configs.secret.argocdServerAdminPassword=${ARGOCD_HASHED_PASSWORD}" \
    --set "argo-cd.configs.secret.argocdServerAdminPasswordMtime=$(date +%FT%T%Z)" \
    -f values-${APP_PROVIDER}-${APP_NETWORK}.yaml \
    .

ArgoCD FAQ

The ArgoCD website has a great FAQ Section