You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/modules/demos/pages/argo-cd-git-ops.adoc
+17-42Lines changed: 17 additions & 42 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -56,6 +56,17 @@ This demo consists of multiple parts:
56
56
57
57
TODO: arch overview image
58
58
59
+
== Sealed Secrets
60
+
61
+
When managing all resources and configs via Git, deploying sensitive properties like certificates or credentials via Git becomes a problem.
62
+
63
+
There are multiple solutions like Hashicorp or Bitwarden, which heavily depend on the infrastructure already available.
64
+
65
+
For the sake of this demo, {sealed-secrets}[Bitnami's Sealed Secrets] are utilized.
66
+
Sensitive data is encrypted as a `SealedSecret` before commiting to the Git repository, synced via ArgoCD and decrypted by the Sealed Secrets controller into a standard Kubernetes `Secret`.
67
+
68
+
This way, everything will be stored and managed in Git.
69
+
59
70
== ArgoCD UI
60
71
61
72
ArgoCD will be the first product that is deployed in this Demo. Once the pods are ready, you can port-forward the argocd-server in order to access the Web UI.
In your browser, go to `https://localhost:8443` and login with username `admin` and password `adminadmin`.
69
80
70
-
NOTE: There will be an initial warning from the Browser that this site is insecure due to self-signed certificates. This can be ignored in this case.
81
+
NOTE: There will be an initial warning from the Browser, that this site is insecure due to self-signed certificates. This can be ignored in this case.
71
82
72
83
TODO: screenshots
73
84
74
-
== Sealed Secrets
75
-
76
-
When managing all resources and configs via Git, deploying sensitive properties like certificates or credentials via Git becomes a problem.
77
-
78
-
There are multiple solutions like Hashicorp or Bitwarden, which heavily depend on the infrastructure already available.
79
-
80
-
For the sake of this demo, {sealed-secrets}[Bitnami's Sealed Secrets] are utilized.
81
-
Sensitive data is encrypted as a `SealedSecret` before commiting to the Git repository, synced via ArgoCD and decrypted by the Sealed Secrets controller into a standard Kubernetes `Secret`.
82
-
83
-
This way, everything will be stored and managed in Git.
84
-
85
85
== Stackable operators
86
86
87
87
The Stackable operators are deployed via ArgoCD using the Stackable Helm charts and an ArgoCD {argo-cd-applicationset}[`ApplicationSet`].
@@ -90,8 +90,7 @@ using different versions and Git sources (repository & branch) as well as the po
90
90
91
91
NOTE: This demo does not use a multi cluster environment for the sake of simplicity.
92
92
93
-
[source,console]
94
-
----
93
+
[source,yaml]
95
94
---
96
95
apiVersion: argoproj.io/v1alpha1
97
96
kind: ApplicationSet
@@ -100,39 +99,15 @@ metadata:
100
99
spec:
101
100
generators:
102
101
- matrix:
103
-
generators:licationSet`.
104
-
** Spin up requirements like Minio and Postgres as `Application`.
105
-
** Deploy Stackable Airflow manifests in their respective `Projects`.
106
-
** DAGs are synced via Airflow gitsync, not ArgoCD.
107
-
** Airflow uses the Kubernetes executor and write its logs to S3 / Minio.
108
-
** DAGs can be started manually in the Airflow webserver UI
109
-
110
-
TODO: arch overview image
111
-
112
-
== ArgoCD UI
113
-
114
-
ArgoCD will be the first product that is deployed in this Demo. Once the pods are ready, you can port-forward the argocd-server in order to access the Web UI.
115
-
102
+
generators:
116
103
- list:
117
104
elements:
118
105
- operator: commons
119
106
- operator: listener
120
107
- operator: secret
121
108
- operator: airflow
122
109
- operator: druid
123
-
- operator: hbaselicationSet`.
124
-
** Spin up requirements like Minio and Postgres as `Application`.
125
-
** Deploy Stackable Airflow manifests in their respective `Projects`.
126
-
** DAGs are synced via Airflow gitsync, not ArgoCD.
127
-
** Airflow uses the Kubernetes executor and write its logs to S3 / Minio.
128
-
** DAGs can be started manually in the Airflow webserver UI
129
-
130
-
TODO: arch overview image
131
-
132
-
== ArgoCD UI
133
-
134
-
ArgoCD will be the first product that is deployed in this Demo. Once the pods are ready, you can port-forward the argocd-server in order to access the Web UI.
135
-
110
+
- operator: hbase
136
111
- operator: hdfs
137
112
- operator: hive
138
113
- operator: kafka
@@ -175,7 +150,7 @@ ArgoCD will be the first product that is deployed in this Demo. Once the pods ar
175
150
176
151
The `matrix.generators.list[].elements[]` will create a union of parameters that may be used in the `ApplicationSet` template as follows:
177
152
178
-
[source,console]
153
+
[source,yaml]
179
154
----
180
155
# [...]
181
156
template:
@@ -212,7 +187,7 @@ template:
212
187
213
188
The templated version for e.g. the parameters `operator=zookeeper`, `server=https://kubernetes.default.svc` and `targetRevision=25.7.0` will result in the following template:
0 commit comments