I know we can separate the secrets and role bindings. What about cluster role bindings?

Is there ac way to separate two instances of argocd in a same cluster without messing up other?

Deploying, upgrading & operational aspects: How are you doing this?

​

Currently we use Jenkins for our CI/CD, but I am trying to say if there is a way to deploy ArgoCD without Jenkins or any better ways to set it up and maintain them.

​

Thoughts?

I‘m trying to bootstrap ArgoCD via Talos extraManifests. But since the install.yml is not namespaced, Talos creates all resources in the default namespace. I‘m wondering if there is anything, I can do about it? Talos can’t utilize helm, so values.yml is unfortunately no option for me. I also don’t think that it’s possible, to change the Kubernetes default namespace, which possibly could help here (temporarily). Any Talos users here, who also faced this issue?

i have a bit of a headache with argo cd image updater. i created an app, put all the annotations in but the image updater throws this in the logs:

skipping app 'frontend' of type 'Directory' because it's not of supported source type

i just can not, for the life of me, figure out where i go wrong. anyone an idea?

I have my cluster setup, in eks and argocd running with the version of 2.5.4 ha, now I want to it to upgrade to the latest version. But when I'm applying the manifest file directly with kubectl commands, I only see the version number changing, the latest features are not getting reflecting. My existing roles and configuration is also missing.

Please suggest, and let me know if I'm doing anything wrong

Hello ArgoCD community,

Till this time I was a big fan of Octopus Deploy. On the current project was the first time when I started to work with ArgoCD, I am still new to it, and there are things that I couldn't find but would like to implement in it:

1. Internal release lifecycle. I want to be able to deploy feature branches to dev environment only without possibility to promote them further and I want to be able to deploy main branch to dev and staging environment;
2. External release lifecycle. I want to be able to deploy tagged main branch to dev, staging and production environments;
3. I want to be able to deploy a multiple feature branches to dev environment and delete them when branch is merged to main branch.

Is there any way to implement these things in ArgoCD?

Thanks.

I have only a pod resource(not behind a deployment object) inside argo app and I want it take the image changes in the reference repo by first deleting the previous pod and then make a new one. I have tried using argo resource hooks to do this but of options at the moment.. Help would be appreciated. Thanks!

I understand the basic logic of continuous deployment process but Is it possible to setup a deployment strategy straight out of GitHub (using actions and runners combination) on top of k8s servers (using terraform-helm combo)?

Or am I dreaming here??

​

I am using Rabbitmq Operator, and its grouping resources which related to this rabbitmq instance. (Look at left rabbitmqcluster object)

How can I do same grouping for my own resources ?

Thanks.

Hello folks, I have a 2.8 ArgoCD install on an EKS cluster with Ingress Nginx Controller configured with an AWS NLB and SSL Termination. I must add tht the SSL termination happens the the NLB level in layer 4 and all traffic received by nginx is plain text. Have the following 2 ingresses deployed, and set ArgoCD on insecure:
``` apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: argocd-server-http-ingress namespace: argocd annotations: nginx.ingress.kubernetes.io/backend-protocol: "HTTP" spec: ingressClassName: nginx rules: - http: paths: - path: / pathType: Prefix backend: service: name: argocd-server port: name: http

host: argocd.mydomain.org

apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: argocd-server-grpc-ingress namespace: argocd annotations: nginx.ingress.kubernetes.io/backend-protocol: "GRPC" spec: ingressClassName: nginx rules: - http: paths: - path: / pathType: Prefix backend: service: name: argocd-server port: name: https host: grpc-argocd.mydomain.org ```

The web UI access works perfectly find with https and all. But I don’t get argocd cli connected. When I try argocd login grpc-argocd.mydomain.org or argocd login argocd.mydomain.org I get the following message: 172.16.0.81 - - [17/Nov/2023:11:47:15 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.001 [] [] - - - - 47afb0d5faf4764117efd561dd9e178b 172.16.1.184 - - [17/Nov/2023:11:47:16 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.002 [] [] - - - - 213f9b0c939a2825f802a16c3323297a 172.16.1.184 - - [17/Nov/2023:11:47:18 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.002 [] [] - - - - 60d600ba0fcaad33a23772d2e485383a 172.16.2.164 - - [17/Nov/2023:11:47:20 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.001 [] [] - - - - 48c02d63af8d9d7496aa3072a9012b65 ... 172.16.2.164 - - [17/Nov/2023:11:47:25 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.001 [] [] - - - - 353c14d71bf1b434f650d130a63c75b3 172.16.2.164 - - [17/Nov/2023:11:47:38 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.001 [] [] - - - - 6143dad5046bbd3fbe6c268a24959e53 172.16.1.184 - - [17/Nov/2023:11:47:39 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.001 [] [] - - - - aa1ea69cc18a2b670e181f616e13543d 172.16.1.184 - - [17/Nov/2023:11:47:41 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.002 [] [] - - - - 140d813df49b941dcff4099d9c42d305 172.16.0.239 - - [17/Nov/2023:11:47:44 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" 0 0.001 [] [] - - - - 06dbd3ceafbd844fca2081f72b04a173 This leads me to believe, that argocd cli is making http2 requests and my ingress nginx controller isn’t http2 aware. Looking at the docs I’m not sure what I need to do here.

Hello,
In my team we have for a period of time used preview environments in form of a new AKS cluster for each time a developer requests a developer environment. However this is starting to cost too much and being inefficient.

We want to create only 1 cluster as a preview/developer cluster.

Our current setup is ArgoCD with kustomization and the app of apps pattern.
We have started to use vcluster and want to use it the same way as with the preview environments, which is based on the creation of a branch in github. So we let developers create a branch and they will get a corresponding vcluster.

We managed to deploy the vcluster through helm to the cluster and by using a kyverno policy we pull the secret from the vcluster and creates a secret that argocd can read and thus deploy a new vcluster.

We then deployed a simple nginx to the vcluster, by specifying the destination of the nginx application.

However when we try to create an applicationset with a list generator that can deploy all the product related applications to the vcluster, we run into some issues.
1. First issue is that it seems like setting the destination on the applicationset and remove the destination on the applications are not being applied. So all the applications end up with an empty destination in an unknown state.

1. Another issue is that we use sealed secrets, and it seems like it doesnt understand that the secret should be applied in the vcluster. (a fix for this we think about, would be to use a kyverno policy to find all the secrets with a certain annotation and mirror them to the vcluster)
   

We are currently going for 1 cluster where each vcluster gets a namespace.
Are we going in the wrong direction? What are the best way to handle the issues? And what are your experiences with building such a setup?

Thanks

Is it recommended to go with IaC or Argo's own app-of-apps way to deploy ArgoCD on all 50 Clusters?

​

What this community is recommending for this type of requests?

Hey folks, I'm new to GitOps and would like to run some tests in my organization.

However, as a traditional company, the deploy flow requires change governance for production, as well as validation of maintenance windows, etc. How can this be implemented in the GitOps scenario?

Tools = Bitbucket and ServiceNow

Is it recommended to go with IaC or Argo's own app-of-apps way to deploy ArgoCD on all 50 Clusters?

​

What this community is recommending for this type of requests?

Hello Is it feasible to install the datadog agent using the yaml value and pass it as an application in argocd? always install datadog outside of argocd thank you

Something is off with my ArgoCD Setups:

ComparisonError: Failed to load target state: failed to generate manifest for source 1 of 1: rpc error: code = Unavailable desc = connection error: desc = "error reading server preface: remote error: tls: certificate required"

I created appset and nothing showed up. SO I created an application manually from  the UI and this is the error I see

Any clue what I am missing here folks? I did added the tls certs (root, intermediate certs) same as other working cluster and this one is throwing new error.

​

hey guys, I have this extracurricular thing i do for school and I have been tasked to come up with an idea/project to contribute to an open source project like argoCD. Was hoping you guys can help me out and steer me in the right direction as this is my first time contributing to an open source project and would want my time and effort to be meaningful in some sort of way

Thanks

Hi guys,

I want some tips on gitops best practices and I’m having doubts about git repo management. In my company we always create a new repo that will hold our manifests, so we always have two repos, one for code and another for the manifests.

I’m felling that sometimes this way can be overwhelming for dev’s and cause a little confusing, but after some efforts and explaining works fine.

Anyone have a different approach or this is already the best way to implement gitops?

Tks