How can I configure ArgoCD CLI to work with SSO and Cloudflare URL? #20234

andrii-korotkov-verkada · 2024-10-04T18:23:00Z

andrii-korotkov-verkada
Oct 4, 2024
Collaborator

Hey. My company uses SSO via Okta to login to ArgoCD and uses Cloudflare urls for ArgoCD UI. I've tried to use CLI, but facing some issues when trying to get SSO login to work. Also, TLS doesn't work well.
I've tried

argocd login <argocd-cloudflare-url> --port-forward --port-forward-namespace argocd --sso

But got

FATA[0004] Failed to establish connection to 127.0.0.1:65077: EOF

This doesn't work without SSO either.
When I try with plaintext

argocd login <argocd-cloudflare-url> --port-forward --port-forward-namespace argocd --plaintext --sso

It proceeds, but then I get

FATA[0001] Failed to query provider "<argocd-cloudflare-url>/api/dex": oidc: failed to decode provider discovery object: expected Content-Type = application/json, got "text/html": invalid character '<' looking for beginning of value

When I check

curl -i <argocd-cloudflare-url>/api/dex

I get the html response as

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>cloudflare</center>
</body>
</html>

If I just try without sso

argocd login <argocd-cloudflare-url> --port-forward --port-forward-namespace argocd --plaintext

I get prompted a username, making some progress.
While it's possible to login with username and password, SSO login would be much better.
Can you help figuring out how to set it up, please?

Answered by andrii-korotkov-verkada

Oct 7, 2024

I've managed to make it work with

kubectl port-forward svc/argocd-server -n argocd 8080:443

And then in a separate window

argocd login localhost:8080 --sso --header CF-Access-Token:$(cloudflared access token -app=<cloudflare argocd url>) --plaintext

View full answer

andrii-korotkov-verkada · 2024-10-07T22:47:19Z

andrii-korotkov-verkada
Oct 7, 2024
Collaborator Author

I needed to pass a cloudflare token as a header
The following works

cloudflared access login <cloudflare argocd url>
argocd login <cloudflare argocd url> --port-forward --port-forward-namespace argocd --sso --header CF-Access-Token:$(cloudflared access token -app=<cloudflare argocd url>) --plaintext

0 replies

andrii-korotkov-verkada · 2024-10-07T22:49:22Z

andrii-korotkov-verkada
Oct 7, 2024
Collaborator Author

Hm, but now I'm getting

FATA[0000] Failed to establish connection to port-forward:443: dial tcp: lookup port-forward: no such host

when trying to run any commands

0 replies

andrii-korotkov-verkada · 2024-10-07T23:02:52Z

andrii-korotkov-verkada
Oct 7, 2024
Collaborator Author

I've managed to make it work with

kubectl port-forward svc/argocd-server -n argocd 8080:443

And then in a separate window

argocd login localhost:8080 --sso --header CF-Access-Token:$(cloudflared access token -app=<cloudflare argocd url>) --plaintext

0 replies

andrii-korotkov-verkada · 2024-10-07T23:05:12Z

andrii-korotkov-verkada
Oct 7, 2024
Collaborator Author

Apparently with a former approach I need to pass --port-forward --port-forward-namespace argocd to every command, which is suboptimal.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

How can I configure ArgoCD CLI to work with SSO and Cloudflare URL? #20234

{{title}}

Replies: 4 comments

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

Select a reply

How can I configure ArgoCD CLI to work with SSO and Cloudflare URL? #20234

andrii-korotkov-verkada Oct 4, 2024 Collaborator

Replies: 4 comments

andrii-korotkov-verkada Oct 7, 2024 Collaborator Author

andrii-korotkov-verkada Oct 7, 2024 Collaborator Author

andrii-korotkov-verkada Oct 7, 2024 Collaborator Author

andrii-korotkov-verkada Oct 7, 2024 Collaborator Author

andrii-korotkov-verkada
Oct 4, 2024
Collaborator

andrii-korotkov-verkada
Oct 7, 2024
Collaborator Author

andrii-korotkov-verkada
Oct 7, 2024
Collaborator Author

andrii-korotkov-verkada
Oct 7, 2024
Collaborator Author

andrii-korotkov-verkada
Oct 7, 2024
Collaborator Author