Argo CD

This walkthrough shows you how to use CloudTruth parameters and secrets in Argo CD directly from our Argo CD plugin.
GitHub - cloudtruth/argocd-cloudtruth-plugin: An ArgoCD plugin that allows one to replace cloudtruth parameter references with their values in the yaml files delivered to kubernetes
GitHub
Prerequisites
You are familiar with Argo CD.
You have created one or more CloudTruth Parameters.
You have created a CloudTruth API Access token.
CloudTruth Argo CD plugin
The CloudTruth plugin solves how to handle secrets management with Argo CD. When the plugin is installed in your application it will replace any references following the format <parameter> in your GitOps yaml files.
Installing the plugin
You can run an automated installer that will install the plugin in your Argo CD installation.
1
curl -s https://raw.githubusercontent.com/cloudtruth/argocd-cloudtruth-plugin/main/install/setup.sh | sh
Copied!
Provide the installer with the following CloudTruth parameters:
Parameter
Value
​CLOUDTRUTH_API_KEY​
Provides access to your CloudTruth org
​CLOUDTRUTH_ENVIRONMENT​
Specifies a targeted Environment
​CLOUDTRUTH_PROJECT​
Specifies a targeted project
​CLOUDTRUTH_TAG​
Specifies a targeted tag
The installer will perform the following to configure the plugin in your Argo CD installation:
1.Create a K8s secret with the provided parameters in the Argo namespace.
2.Patch the argocd configmap to add CloudTruth to configManamentPlugins​
3.Patch the argocd-repo-server to add the required volumes, secret and init containers.
You can restart the Argo CD repo server to pickup the changes.
1
kubectl rollout restart -n argocd deployment/argocd-repo-server
Copied!
For a full parameters list visit our Argo plugin repo.
Using the plugin for secrets and parameters
Now that the plugin is installed, you can reference CloudTruth config in your app config files.
UI app install
When creating an application from a Git repository using the Argo CD UI plugins are enabled from the Directory dropdown.
Select the argocd-cloudtruth-plugin
You can also override any installation parameter values for your specific app with plugin ENV values.
Argo CLI app installation
The Argo CLI allows you to create apps with the CloudTruth plugin as well as update existing apps to be plugin enabled. The following are a few examples of using the CloudTruth plugin with the Argo CLI.
App creation
​Create an application:
1
argocd app create YOUR_APP --repo https://github.com/YOUR_REPO --path cloudtruth-plugin --dest-server YOUR_K8S_SERVER --dest-namespace default --config-management-plugin argocd-cloudtruth-plugin
Copied!
Create an application and specify a specific project:
1
argocd app create YOUR_APP --repo https://github.com/YOUR_REPO --path cloudtruth-plugin --dest-server YOUR_K8S_SERVER --dest-namespace default --config-management-plugin argocd-cloudtruth-plugin --plugin-env CLOUDTRUTH_PROJECT=YOUR_CLOUDTRUTH_PROJECT
Copied!
Create an application and specify a specific project and environment:
1
argocd app create YOUR_APP --repo https://github.com/YOUR_REPO --path cloudtruth-plugin --dest-server YOUR_K8S_SERVER --dest-namespace default --config-management-plugin argocd-cloudtruth-plugin --plugin-env CLOUDTRUTH_PROJECT=YOUR_CLOUDTRUTH_PROJECT  --plugin-env CLOUDTRUTH_ENVIRONMENT=YOUR_CLOUDTRUTH_ENVIRONMENT
Copied!
App updates
Add the plugin to existing apps with set:
1
argocd app set YOUR_APP --config-management-plugin argocd-cloudtruth-plugin
Copied!
update a plugin parameter value to existing app:
1
argocd app set YOUR_APP --plugin-env CLOUDTRUTH_ENVIRONMENT=YOUR_CLOUDTRUTH_ENVIRONMENT
Copied!
Argo CD plugin demo
Here is an example use case with the Argo CD plugin that populates a ConfigMap with values pulled from CloudTruth while deploying an application in a GitOps workflow.
We will deploy a flask application from our demo Git repo.
The ConfigMap substitutes data values from CloudTruth using the default substitution format <YOUR_PARAM_NAME>.
1
kind: ConfigMap 
2
apiVersion: v1 
3
metadata:
4
  name: flask-map
5
data:
6
   FLASK_APP: "<FLASK_APP>"
7
   FLASK_ENV: "<FLASK_ENV>"
8
   FLASK_MESSAGE: "<FLASK_MESSAGE>"
9
   FLASK_RUN_HOST: "<FLASK_RUN_HOST>"
10
   FLASK_RUN_PORT: "<FLASK_RUN_PORT>"
11
   IMAGE: "<IMAGE>"
Copied!
You can use the CloudTruth CLI that sets up a project to deploy this example.
1
cloudtruth projects set flask
2
cloudtruth --project flask parameters set  FLASK_APP -v "flaskdemo.py"
3
cloudtruth --project flask parameters set  FLASK_DEBUG -v "True"
4
cloudtruth --project flask parameters set  FLASK_ENV -v "development"
5
cloudtruth --project flask parameters set  FLASK_MESSAGE -v "Configuration Management for default"
6
cloudtruth --project flask parameters set  FLASK_RUN_HOST -v "0.0.0.0"
7
cloudtruth --project flask parameters set  FLASK_RUN_PORT -v "3000"
8
cloudtruth --project flask parameters set  IMAGE -v CloudTruth.jpg
Copied!
Deploy the app with the following Argo CLI command:
1
argocd app create flask --repo https://github.com/cloudtruth/blog-examples --path argo-flask/cloudtruth-plugin --dest-server https://kubernetes.default.svc --dest-namespace default --config-management-plugin argocd-cloudtruth-plugin --plugin-env CLOUDTRUTH_ENVIRONMENT=production --plugin-env CLOUDTRUTH_PROJECT=flask
Copied!
The argocd app create is broken down into the following commands. The --plugin-env commands specify the CloudTruth environment and project to get values from.
Command
Value
--repo
​https://github.com/cloudtruth/blog-examples​
--path
argo-flask/cloudtruth-plugin
--dest-server
https://kubernetes.default.svc
--dest-namespace
default
--config-management-plugin
argocd-cloudtruth-plugin
--plugin-env
CLOUDTRUTH_ENVIRONMENT=production
--plugin-env
CLOUDTRUTH_PROJECT=flask
Verify the ConfigMap has values from the configured CloudTruth project with the manifests command:
1
argocd app manifests flask
2
​
3
---
4
apiVersion: v1
5
data:
6
  FLASK_APP: flaskdemo.py
7
  FLASK_ENV: development
8
  FLASK_MESSAGE: Configuration Management for default
9
  FLASK_RUN_HOST: 0.0.0.0
10
  FLASK_RUN_PORT: "3000"
11
  IMAGE: CloudTruth.jpg
12
kind: ConfigMap
13
metadata:
14
  labels:
15
    app.kubernetes.io/instance: flask
16
  name: flask-map
17
  namespace: default
Copied!
Deploy by synching the app:
1
argocd app sync flask
Copied!
You can also deploy and verify the app health in the Argo UI.

🧩Integrations

AWS

Last modified 1mo ago

Copy link

Contents

Prerequisites

CloudTruth Argo CD plugin

Using the plugin for secrets and parameters

UI app install

Argo CLI app installation

Argo CD plugin demo