19th and 20th of May 2023 by Milan Skuhra

https://slides.com/profiprog/argocd-kcd2023

practical usage

DevOps engineer @solargis

https://gitlab.com/profiprog/argocd-workshop/-/wikis/home

soon...

• prune: true
• allowEmpty: true
• selfHeal: true
• managedNamespaceMetadata: {labels..., annotations.... }
  • works only with sync option CreateNamespace=true

Phases:

• PreSync
• Sync
• PostSync

Each phase can have one or more waves

Waves are defined by annotations

argocd.argoproj.io/sync-wave: "-1"

argocd.argoproj.io/sync-wave: "0"

argocd.argoproj.io/sync-wave: "5"

• PreSync
• Sync
• Skip
• PostSync
• SyncFail

* are applicable for individual resources

(*) are applicable for application and idividual resources

• ApplyOutOfSyncOnly=true (Selective Sync)

• PrunePropagationPolicy=foreground|baground|orphan

• PruneLast=true(*)

• Prune=false*

• Delete=false*

• Validate=false*

• SkipDryRunOnMissingResource=true*

• Replace=true(*)

• ServerSideApply=true(*)
• FailOnSharedResource=true
• RespectIgnoreDifferences=true
• CreateNamespace=true (required with managedNamespaceMetadata)

* are applicable for individual resources

(*) are applicable for application and idividual resources

• What is an ApplicationSet?
• When is it best to use the ApplicationSet controller?
• How does an ApplicationSet work and what are the benefits it provides?
• Why do I need a Generator and what types are there?

Primary generators

• List Generator
• Cluster Generator

• Git Generator

  • Directory Generator
  • File Generator
• SCM provider generator
• Pull Request Generator
• Cluster Decision Resource Generator

Combining generators

• Matrix/Merge generator

apiVersion: v1
kind: Secret
metadata:
  name: example-database
  annotations:
    avp.kubernetes.io/path: "apps/data/database"
    avp.kubernetes.io/secret-version: "2"
stringData:
  username: <username>
  password: <password>
  inlined: <path:kv/data/mysql#user>:<path:kv/data/mysql#user#2>

• documentation
• argocd-vault-plugin

• Full List of Supported Annotation

   avp.kubernetes.io/ignore: "true"
   avp.kubernetes.io/remove-missing: "true"

• Modifiers

   <key|base64encode|base64decode|jsonParse
       |jsonPath {.username}{': '}{.password}
       |yamlParse|indent 3|sha256sum>

• Supported secret providers

  • IBM Cloud Secrets Manager
  • AWS Secrets Manager
  • Google Cloud Secret Manager
  • Yandex Cloud Lockbox
  • 1Password Connect Server

export GIT_REPO=https://github.com/owner/name
export GIT_TOKEN=ghp_PcZ...IP0
argocd-autopilot repo bootstrap

Prerequisites:

• Access to kubernetes
• Access token and url to git repository

When should to use autopilot?

How to recover cluster without argocd-autopilot?

             https://gitlab.com/-/snippets/2543586

• https://codefresh.io/ebooks/implement-gitops-scale-today/
• https://learning.codefresh.io/ - course