Argo CD



kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

Follow the instructions to configure a certificate (and ensure that the client OS trusts it). ( https://argo-cd.readthedocs.io/en/stable/operator-manual/tls/ )
Configure the client OS to trust the self signed certificate.
Use the –insecure flag on all Argo CD CLI operations in this guide.

Turn off TLS because supposedly Traefik ingress needs this turned off and will handle it for me ( probably, I think ). No indentation for that first line “data:”.



kubectl edit configmap argocd-cmd-params-cm -n argocd

data:
  server.insecure: "true"

or patch it like this:



kubectl patch configmap argocd-cmd-params-cm -n argocd --type merge -p '{"data":{"server.insecure":"true"}}'
kubectl rollout restart deployment argocd-server -n argocd

Client install ( Arch, MacOS, or generic Linux :



brew install argocd
pacman -S argocd


curl -sSL -o argocd-linux-amd64 https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-amd64
sudo install -m 555 argocd-linux-amd64 /usr/local/bin/argocd
rm argocd-linux-amd64

Change to load balancer:



kubectl patch svc argocd-server -n argocd -p '{"spec": {"type": "LoadBalancer"}}'

Or setup an ingress for: * svc/argocd-server * 443 ( 80 redirects to this )

Traefik ingress

need to run argocd with –insecture flag
not sure why it should directly go to 80 instead of 443 ?????
also not sure how gRPC and HTTPS work on same port ?????
add to DNS ( or /etc/hosts ) first

Supposed to be 80 for ingress acording to docs but doesn’t work. can connect if I use 443 but gives internal server error.



apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: argocd-server
  namespace: argocd
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: Host(`argocd.lab.net`)
      priority: 10
      services:
        - name: argocd-server
          port: 443
    - kind: Rule
      match: Host(`argocd.lab.net`) && Header(`Content-Type`, `application/grpc`)
      priority: 11
      services:
        - name: argocd-server
          port: 443
          scheme: h2c
  tls:
    certResolver: default

Hitting the clusterIP works ( hitting the pod just resulted in redirects ): hitting the



curl -k 10.42.0.67:8080           # works
curl -k http://10.43.67.146:443  # hitting the clusterIP works  ( https on 443 )
https://argocd.lab.net/           # hitting the ingress gives bad gateway

Check logs:



kubectl logs -n argocd deployment/argocd-server

username: admin



argocd admin initial-password -n argocd  # get initial password, then delete the secret



argocd login argocd.lab.net
argocd login  argocd.lab.net --insecure       # ingress not working  FAIL
argocd login  10.43.67.146:443  --insecure    # clusterIP
argocd account update-password

Add a cluster ( or stick with current cluster which works by default ):



kubectl config get-contexts -o name       # list all clusters contexts in your current kubeconfig:
argocd cluster add cluster1               # use this cluster context

Ingress is broken, instead patched to use nodeport. This is working great.



kubectl patch svc argocd-server -n argocd -p '{"spec": {"type": "NodePort"}}'

This totally works ( nodeport ):

http://argocd.lab.net:31224/

Create app with CLI:



kubectl config set-context --current --namespace=argocd

argocd app create guestbook --repo https://github.com/argoproj/argocd-example-apps.git --path guestbook --dest-server https://kubernetes.default.svc --dest-namespace default

argocd app get guestbook    # view status
argocd app sync guestbook   # sync (deploy) the application  ( pull and kubectl apply the manifest )

Create app with CLI doesn’t work - probably because of broken ingress ( RPC error )
Can also create app and sync with web GUI

Some argo commands:



  920  argocd proj list
  921  argocd cluster list
  922  argocd account list
  923  history
  924  argocd app list

Using the GUI:

Set to automatic instead of manual if you want it to poll the git repo and automatically apply any changes that are committed.

Application Name	guestbook
Project Name	default
SYNC Policy	Manual
Repository URL	https://github.com/argoproj/argocd-example-apps.git
Revision	HEAD
Path	guestbook
Cluster URL	https://kubernetes.default.svc
Namespace	default

Create
Sync