Tutorials

ArgoCD

Cloudflare Tunnel

Docker

Doppler

Jenkins

Nexus

SonarQube

Terraform

Trivy

What is Argo CD?

Argo CD is a declarative continuous delivery tool designed to automate the deployment and management of Kubernetes applications. It follows the GitOps methodology, where the desired application state is stored in a Git repository. Argo CD continuously monitors the application’s running state and compares it with the configuration defined in the repository. When changes are detected, Argo CD notifies users and provides options to synchronise the live state with the desired state, ensuring consistent deployments.

Prerequsites

• Virtual Machine running Ubuntu 22.04 or newer

Update Package Repository and Upgrade Packages

sudo apt update
sudo apt upgrade

Create Kubernetes Cluster

sudo bash
curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server" sh -s - --disable traefik
exit
mkdir .kube
sudo cp /etc/rancher/k3s/k3s.yaml ./config
sudo chown dmistry:dmistry config
chmod 400 config
export KUBECONFIG=~/.kube/config

Install ArgoCD

Create ArgoCd namespace

kubectl create namespace argocd

kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

Change ArgoCD server service to NodePort

kubectl patch svc argocd-server -n argocd -p '{"spec": {"type": "NodePort"}}'

OR Port Forward

kubectl port-forward svc/argocd-server -n argocd 8080:443 --address 0.0.0.0

kubectl get svc -n argocd

Fetch ArgoCD admin password

kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d

Copy Temporary Password

Optional – Enable TLS

Install Cert-Manager

helm repo add jetstack https://charts.jetstack.io
helm repo update
helm install \
cert-manager jetstack/cert-manager \
--namespace cert-manager \
--create-namespace \
--version v1.11.0 \
--set installCRDs=true

Create Cluster Issuser for Lets Encrypt vim letsencrypt-product.yaml and paste the below contents adjust your email address

Create a cluster issuer manifest

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: contact@devopsfoundry.com
privateKeySecretRef:
name: letsencrypt-prod
solvers:
- http01:
ingress:
class: nginx

Apply manifest

kubectl apply -f letsencrypt-product.yaml

Apply manifest

kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.7.0/deploy/static/provider/cloud/deploy.yaml

Create ingress for ArgoCD vim ingress.yaml and paste the below contents adjust the domain name

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: argocd-server-ingress
namespace: argocd
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
kubernetes.io/ingress.class: nginx
kubernetes.io/tls-acme: "true"
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
# If you encounter a redirect loop or are getting a 307 response code
# then you need to force the nginx ingress to connect to the backend using HTTPS.
#
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
spec:
  rules:
  - host: argocd.devopsfoundry.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: argocd-server
            port:
              name: https
  tls:
  - hosts:
    - argocd.devopsfoundry.com
    secretName: argocd-secret # do not change, this is provided by Argo CD

Apply manifest

kubectl apply -f ingress.yaml

Install ArgoCD CLI

curl -sSL -o argocd-linux-amd64 https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-amd64
sudo install -m 555 argocd-linux-amd64 /usr/local/bin/argocd
rm argocd-linux-amd64

Login to ArgoCD and change the password

argocd login argocd.devopsfoundry.com

argocd account update-password

Allow admin account to create API tokens

kubectl patch -n argocd configmap argocd-cm --type merge -p '{"data":{"accounts.admin":"apiKey"}}'

Generate the Token

argocd account generate-token

Add repo

argocd repo add <repository-url> --username <your-username> --password <your-password>

# use github token as password

Run this command where you have EKS Cluster

argocd login argocd.devopsfoundry.com:30444 --username admin --password {{YOUR_ARGOCD_UI_PASSWORD}} #Change the nodeport

argocd cluster add arn:aws:eks:eu-west-2:your-aws-account-arn:cluster/main-eks-cluster --kubeconfig ~/.kube/config #Replace cluster arn

Uninstalling K3s

/usr/local/bin/k3s-uninstall.sh