Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- it-wiki:kubernetes:argocd [2025/01/16 13:05] – [Add OCI Helm Repository] marko
+++ it-wiki:kubernetes:argocd [2025/07/11 10:09] (aktuell) – marko
@@ Zeile 1: / Zeile 1: @@
 ====== ArgoCD ======
+===== Installation Core Variante =====
+[[https://argo-cd.readthedocs.io/en/stable/getting_started/|stable getting started]]
+===== Installation Helm Chart Variante =====
+<code bash>
+# install argocd via helm and customized values1
+helm upgrade --install argocd argo-cd \
+  --repo https://argoproj.github.io/argo-helm \
+  --values values.yaml --create-namespace --namespace argocd
+</code>
+values.yaml:
+<code yaml>
+# helm override name
+nameOverride: argocd
+# settings for argocd
+global:
+  # domain dns name for ingress
+  domain: argocd.tuxnet.lab
+#
+configs:
+  params:
+    # tls termination is handled on ingress, so the server will run
+    # via insecure mode
+    server.insecure: true
+server:
+  # ingress settings
+  ingress:
+    enabled: true
+    annotations:
+      # we use the cert-manager for the tls certificates
+      cert-manager.io/cluster-issuer: ca-issuer
+    # ingressController traefik is used in this lab
+    ingressClassName: "traefik"
+    # and we use tls termination on ingress level
+    tls:  true
+</code>
 ===== Add OCI Helm Repository =====
 <code bash>
 argocd repo add registry-1.docker.io/bitnamicharts --type helm --name "Bitnami OCI" --enable-oci
+</code>
+===== Support for selfsigned rootCA =====
+''k -n argocd edit cm argocd-tls-certs-cm''
+Das rootCA hier einfach eintragen
+> argocd-tls-certs-cm
+<code yaml>
+data:
+  git-0.training.lab: |
+    -----BEGIN CERTIFICATE-----
+    MIIDRzCCAi+gAwIBAgIRAO4DiGR1GQx8YnDmO+SxJjYwDQYJKoZIhvcNAQELBQAw
+    PTETMBEGA1UEChMKYjEtc3lzdGVtczEmMCQGA1UEAxMddHJhaW5pbmcubGFiIElu
+    dGVybmFsIFJvb3QgQ0EwHhcNMjUwNTA1MDUwMTAwWhcNMzUwNTAzMDUwMTAwWjA9
+    MRMwEQYDVQQKEwpiMS1zeXN0ZW1zMSYwJAYDVQQDEx10cmFpbmluZy5sYWIgSW50
+    ZXJuYWwgUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM0p
+    JoSj+Xgt6mydNUa8DiiT9puWyTm17wL4jRqZszbg/dcXtnnSeBASCX3JGVkdSu5e
+    ADs4AMND6Cgxty+Uh4Yt0IHqZlB2pTKNqRvD+Xu87VRvUUPkHaZBNwif3gMyCTZ5
+    bOFgQ/qH/BAJiDONmoGs/anfKs42C27JRzYBqTYzmmngZl4uae/uxEqs/UIIRlqQ
+    hlxMd9AF/gllzCPO0+ORug5camt/lT84tzL3mkKs2CMrpa7ZkgpWE0xYXa9Knd1a
+    NZONgThq/JjM3U19f1NsQbwIy+aM0Algql1AatJzaKEO+xsKE73mpLyDuttrSICt
+tjL/0uT1GXDX0uKHwcCAwEAAaNCMEAwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB
+    /wQFMAMBAf8wHQYDVR0OBBYEFMdfmTamgSMlMCiICSY4QpLkA8doMA0GCSqGSIb3
+    DQEBCwUAA4IBAQCsZ+IZc/fRRO4mz9uTQCqMTBADgUA3hWLAWVuTQngdl5hZTvCz
+    FZZppO/6aC9IZJ7M6fjkxDyWx/o6diM4HatLJ9l5SR94KrUzLjiYAZdLJhoKMjY1
+ZMT2KLjHtzS+ihGiCYPvo8Ms+Dvrpr0bncrtvsSoW0JoL6Zlzoi/ffycLfEzC2
+xXnFiggsDl3bQD/u02DIrPJpq0EzhaXnahebN3zBIar48SVa/xcjYGeBCM29BvG
+    gtOn4ph/PLZQj53N8aIczYDnVyRbWaJoFif+HXWwZIgJoIrr8/jeLLOILuFZ7Vlh
+    PK1fZFxmPWLJow1iT5A9lSnkquonOIAdnb0o
+    -----END CERTIFICATE-----
 </code>