- Ensure OpenShift GitOps has been installed in the cluster, then run
./deploy-via-argocd.sh. - To rebuild the container image on pushes, wire up Tekton Pipelines as Code (PAC). PAC will use the contents of the .tekton directory as described in Authoring PipelineRuns.
./deploy.shdeploys once from this directory without using ArgoCD./deploy-via-acm-argocd.shdeploys an ApplicationSet designed to work with ACM. ACM and ArgoCD must be installed and aGitOpsServerresource declared binding them.
For now the following configuration must be set up manually in the app's namespace (default: spring-apiserver).
In addition you must create a Repository resource in the spring-apiserver namespace.
You must also add quay-pull-secret to the default service account which will run the pod.
pipelineservice account requiresapplications.argoproj.io-v1alpha1-admincluster role
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: applications.argoproj.io-v1alpha1-admin
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: applications.argoproj.io-v1alpha1-admin
subjects:
- kind: ServiceAccount
name: pipeline
namespace: ${app_namespace}pipelineservice account requires access to secretsquay-pull-secretandredhat-pull-secret
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: pipeline
namespace: ${app_namespace}
secrets:
- name: quay-pull-secret
- name: redhat-pull-secret
imagePullSecrets:
- name: quay-pull-secret
- name: redhat-pull-secret
---
kind: Secret
apiVersion: v1
metadata:
name: quay-pull-secret
namespace: spring-apiserver
data:
.dockerconfigjson: >-
yourbase64encodedconfigjsonhere
type: kubernetes.io/dockerconfigjson
---
kind: Secret
apiVersion: v1
metadata:
name: redhat-pull-secret
namespace: spring-apiserver
data:
.dockerconfigjson: >-
yourbase64encodedconfigjsonhere
type: kubernetes.io/dockerconfigjson- the
argocd-task-async-and-waitTekton task requires these values as env vars - TODO: is there a better way to do this?
---
kind: Secret
apiVersion: v1
metadata:
name: argocd-env-secret
namespace: ${app_namespace}
data:
ARGOCD_AUTH_TOKEN: >-
yourbase64encodedargocdauthtokenhere
type: Opaque
---
kind: ConfigMap
apiVersion: v1
metadata:
name: argocd-env-configmap
namespace: ${app_namespace}
data:
# this is the default for OpenShift Pipelines
ARGOCD_SERVER: openshift-gitops-server.openshift-gitops.svc
```yaml