Question: How to run it on restricted environment?

[piotrlaczykowski]

Hi, can you provide a docs/example how to run it on selfhosted gitlab runners in kubernetes cluster?
In this solution I don't see option like that. I was trying to do it for some time.

1. Connection to existing Argo instance isn't possible because it brakes company rules and wants too much privileges.

2. Running dind means you need access to host/node socket which is abandoned

3. Only solution is kaniko which actually is depricated.

Any ideas?

[dag-andersen]

@piotrlaczykowski

1. Connection to existing Argo instance isn't possible because it brakes company rules and wants too much privileges.
   Yes, I always recommend using a dedicated Argo CD instance rather than your production one. You might find this talk interesting, where we cover the topic: https://youtu.be/fcajag5di68?si=78X-MHwgoX_H3vSk&t=612

At my workplace we have two Argo CD instances. One for production, and one for previews (in another namespace). They are identical, so we ensure that the preview is as reliable as possible! 🚀

Hi, can you provide a docs/example how to run it on selfhosted gitlab runners in kubernetes cluster?

Unfortunately, I have never used GitLab, so I am not able to write a comprehensive GitLab Runner guide. But if you get it working, you are very welcome to add one.

You might find this page useful: Openshift 🤷🏻

I know @sergeyshevch and @rklonner are using self-hosted GitLab runners. If you can share a bit more context about what you are struggling with, maybe one of them can help answer your questions :)

[rklonner]

@piotrlaczykowski : With the Openshift link @dag-andersen shared already the setup I am using. You can also almost reuse it for a Gitlab Runner setup if you are not using Openshift.

It addresses both of your points:

1. Installing a 2nd, dedicated Argo CD instance only for rendering the previews. What is your current installation method of your production Argo CD? I deploy the necessary configuration for accessing private registries also in a GitOps way from Vault with ESO/VSO.
2. DinD was also no option for us - therefore I was very happy to see that Argo CD Diff Preview is also released as a binary - we install it directly into our Gitlab Runner image (See e.g. Openshift instructions).

What is the exact problem you are currently struggling with?