argocd-guidelisted

# ArgoCD Guide ## 1. Installation et configuration initiale ```bash # Helm (recommandé en prod) helm repo add argo https://argoproj.github.io/argo-helm helm install argocd argo/argo-cd \ --namespace argocd --create-namespace \ --set server.insecure=false \ --set configs.params."server\.insecure"=false \ -f argocd-values.yaml # Récupérer le mot de passe admin initial argocd admin initial-password -n argocd # Login CLI argocd login argocd.example.com --username admin --grpc-web ``` **SSO (Azure AD OIDC), config minimale dans `argocd-cm` :** ```yaml data: oidc.config: | name: Azure issuer: https://login.microsoftonline.com/<tenant-id>/v2.0 clientID: <app-id> clientSecret: $oidc.azure.clientSecret requestedScopes: [openid, profile, email] ``` **RBAC, `argocd-rbac-cm` :** ```yaml data: policy.csv: | p, role:developer, applications, sync, */*, allow p, role:developer, applications, get, */*, allow g, team-dev@example.com, role:developer policy.default: role:readonly ``` --- ## 2. Connecter un repository Git ```bash # SSH key argocd repo add git@github.com:org/gitops-repo.git \ --ssh-private-key-path ~/.ssh/id_ed25519 # HTTPS token argocd repo add https://github.com/org/gitops-repo.git \ --username argocd --password <token> ``` **Structure de repo recommandée (monorepo) :** ``` gitops-repo/ ├── apps/ # App of Apps (root) │ ├── dev/ │ └── prod/ ├── manifests/ │ ├── my-app/ │ │ ├── base/ │ │ └