-
Notifications
You must be signed in to change notification settings - Fork 160
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
docs: authorise kargo to argocd-update #2962
docs: authorise kargo to argocd-update #2962
Conversation
Signed-off-by: Faeka Ansari <faeka6@gmail.com>
✅ Deploy Preview for docs-kargo-io ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #2962 +/- ##
==========================================
- Coverage 50.92% 50.90% -0.02%
==========================================
Files 279 279
Lines 25180 25178 -2
==========================================
- Hits 12823 12818 -5
- Misses 11666 11669 +3
Partials 691 691 ☔ View full report in Codecov by Sentry. 🚨 Try these New Features:
|
@@ -1156,3 +1156,34 @@ Although the `argocd-update` step is the only promotion step to currently | |||
utilize this health check framework, we anticipate that future built-in and | |||
third-party promotion steps will take advantage of it as well. | |||
::: | |||
|
|||
### Authorizing Kargo to Update Argo CD Applications |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Given the importance of this information, I think this should be up higher and I wouldn't give it its own section either. If we put it in a note box at the end of the section that first introduces this step (i.e. line 988), it will be much harder to miss this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Understood!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
addressed in c715095
Signed-off-by: Faeka Ansari <faeka6@gmail.com>
:::note | ||
For Kargo `Stage`s to modify and manage Argo CD `Application` resources, | ||
explicit authorization must be granted in the `Application` manifests. | ||
This is achieved by including the `kargo.akuity.io/authorized-stage` annotation. | ||
|
||
The annotation must be formatted as follows: | ||
|
||
```yaml | ||
kargo.akuity.io/authorized-stage: "<project-name>:<stage-name>" | ||
``` | ||
|
||
The following example shows how to configure an Argo CD `Application` | ||
manifest to authorize the `test` `Stage` of the `kargo-demo` `Project`: | ||
|
||
```yaml | ||
apiVersion: argoproj.io/v1alpha1 | ||
kind: Application | ||
metadata: | ||
name: kargo-demo-test | ||
namespace: argocd | ||
annotations: | ||
kargo.akuity.io/authorized-stage: kargo-demo:test | ||
spec: | ||
# Application specifications go here | ||
``` | ||
::: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Formatting looks off on this entire block.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I should remove the indentations
Signed-off-by: Faeka Ansari <faeka6@gmail.com>
Signed-off-by: Faeka Ansari <faeka6@gmail.com>
93feffe
to
c462695
Compare
Signed-off-by: Faeka Ansari <faeka6@gmail.com> (cherry picked from commit 7f92d75)
Successfully created backport PR for |
Signed-off-by: Faeka Ansari <faeka6@gmail.com>
closes #2440
#2921 (comment)