You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: demos/argo-cd-git-ops/README.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,8 +6,8 @@ This demo uses [Sealed Secrets](https://github.com/bitnami-labs/sealed-secrets)
6
6
7
7
The CLI tool `kubeseal` must be installed as described in the [Sealed Secrets readme](https://github.com/bitnami-labs/sealed-secrets?tab=readme-ov-file#kubeseal).
8
8
9
-
The easiest way to seal secrets via `kubeseal` is to have the `argo-cd-git-ops` Stack installed. It provides the Sealed Secrets controller and
10
-
a generated certificate that is automatically used for signing via `kubeseal`.
9
+
The easiest way to seal secrets via `kubeseal` is to have the `argo-cd-git-ops` Stack installed.
10
+
It provides the Sealed Secrets controller and a generated certificate that is automatically used for signing via `kubeseal`.
WARNING: This demo should not be run alongside other demos.
35
35
36
-
NOTE: ArgoCD will be deployed in the `argo-cd` namespace by `stackablectl`. ArgoCD itself will create other namespaces for the deployed products.
36
+
NOTE: ArgoCD will be deployed in the `argo-cd` namespace by `stackablectl`.
37
+
ArgoCD itself will create other namespaces for the deployed products.
37
38
38
39
[#system-requirements]
39
40
== System requirements
@@ -65,7 +66,7 @@ This demo consists of multiple parts:
65
66
66
67
When managing all resources and configs via Git, deploying sensitive properties like certificates or credentials via Git becomes a problem.
67
68
68
-
There are multiple solutions like Hashicorp or Bitwarden, which heavily depend on the infrastructure already available.
69
+
There are multiple solutions to this such as Hashicorp or Bitwarden, which depend heavily on the infrastructure already available.
69
70
70
71
For the sake of this demo, {sealed-secrets}[Bitnami's Sealed Secrets] are utilized.
71
72
Sensitive data is encrypted as a `SealedSecret` before commiting to the Git repository, synced via ArgoCD and decrypted by the Sealed Secrets controller into a standard Kubernetes `Secret`.
@@ -74,7 +75,8 @@ This way, everything will be stored and managed in Git.
74
75
75
76
== ArgoCD UI
76
77
77
-
ArgoCD will be the first product that is deployed in this Demo. Once the pods are ready, you can port-forward the argocd-server in order to access the web UI.
78
+
ArgoCD will be the first product that is deployed in this Demo.
79
+
Once the pods are ready, you can port-forward the argocd-server in order to access the web UI.
In your browser, go to `https://localhost:8443` and login with username `admin` and password `adminadmin`.
85
87
86
-
NOTE: There will be an initial warning from the Browser, that this site is insecure due to self-signed certificates. This can be ignored in this case.
88
+
NOTE: There will be an initial warning from the browser, stating that the site is insecure due to self-signed certificates.
89
+
This can be ignored in this case.
87
90
88
91
The ArgoCD Web UI entry page shows an overview of deployed applications and their status and other metadata as the repository or the date of the last synchronization run.
89
92
@@ -94,7 +97,7 @@ Single applications can be inspected closer after clicking on e.g. the `airflow`
94
97
TODO: Screenshot - Argo UI - Airflow
95
98
96
99
Detailed information about the cluster, the cluster status and deployed components can be accessed in the application details.
97
-
Additionally, if the Git repository and the cluster state itself differ, possible applied changes can be previewed in a code diff similar to Git pull requests.
100
+
Additionally, if the Git repository and the cluster state itself differ, these differences can be previewed in a code diff similar to Git pull requests.
98
101
99
102
TODO: Screenshot - Argo UI - application details Network / List tab -> mark network tabs etc.
100
103
@@ -275,9 +278,11 @@ the logs are fetched from S3 instead of the (already deleted) executor pods. The
Minio then is reachable via `https://localhost:9001` with username `admin` and password `adminadmin`. After the successful Airflow DAG run, logs should be stored in `demo/airflow-task-logs`.
281
+
Minio then is reachable via `https://localhost:9001` with username `admin` and password `adminadmin`.
282
+
After the successful Airflow DAG run, logs should be stored in `demo/airflow-task-logs`.
279
283
280
-
NOTE: There will be an initial warning from the Browser, that this site is insecure due to self-signed certificates. This can be ignored in this case.
284
+
NOTE: There will be an initial warning from the browser, stating that the site is insecure due to self-signed certificates.
0 commit comments