Argo CD 実践ガイド #k8sjp / Argo CD Practice Guide

Kubernetes Meetup Tokyo #21 - Cloud Native CI/CD で発表した資料です
https://k8sjp.connpass.com/event/138375/

Transcript

1. 19/07/25 Kubernetes Meetup Tokyo #21 - Cloud Native CI/CD
   @ponde_m
   Argo CD
   ࣮ફΨΠυ
   

   View Slide

2. ࠓճͷΠϕϯτϖʔδ
   

   View Slide

3. ͜Εʹωλ͔ͿΓ͠ͳ͍Α͏ͳ ر๬
   
   "SHP$%ͷࡉ͔͍࿩Λ͍͖ͯ͠·͢
   ࠓճͷΠϕϯτϖʔδ
   

   View Slide

4. @ponde_m
   Dai Kurosawa
   SRE
   

   View Slide

5. ͓͞Β͍: Argo CD ͱ͸
   • Pull ܕͷ CD
   • GitOps ʹ࢖͏
   • ͍͍ײ͡ͷ UI
   

   View Slide

6. ࠓ೔࿩͢͜ͱ
   • Argo CD ͷ CRD ʹ͍ͭͯ
   • Argo CD ͷ RBAC ʹ͍ͭͯ
   • Argo CD ͷ Sync ઓུʹ͍ͭͯ
   

   View Slide

7. ࠓ೔࿩͢͜ͱ
   • Argo CD ͷ CRD ʹ͍ͭͯ
   • Argo CD ͷ RBAC ʹ͍ͭͯ
   • Argo CD ͷ Sync ઓུʹ͍ͭͯ
   ͕࣌ؒ଍Γͳ͔ͬͨͷͰ

   εΩοϓ͠·͢
   (ࢿྉ͸ͦͷ··Ξοϓ͠·͢)
   

   View Slide

8. Argo CDͷ
   CRD
   

   View Slide

9. Argo CD ͷ CRD
   • 2ͭͷ CRD ͕͋Δ
   • Application
   • AppProject
   

   View Slide

10. Argo CD ͷ CRD
    Application Application Application
    AppProject
    

    View Slide

11. Application
    • Argo CD ʹ͓͚Δ

    σϓϩΠͷઃఆ
    • ݱ࣮ੈքͷ

    ΞϓϦέʔγϣϯͱಉ͡୯Ґ

    (ෳ਺ͷ Object ͷू߹)
    

    View Slide

12. Application
    Git Repository
    Revision
    Path
    Λࢦఆͯͦ͜͠ʹ͋Δ
    manifest ΛσϓϩΠ͢Δ
    

    View Slide

13. Application
    λʔήοτͱͳΔ
    Ϋϥελͱ namespace
    

    View Slide

14. Automated Sync
    • syncPolicy Λ

    ໌ࣔతʹࢦఆ͠ͳ͍ͱ

    ࣗಈͰಉظͯ͘͠Εͳ͍ͷͰ஫ҙ
    • prune: true Λࢦఆ͠ͳ͍৔߹͸

    Ϧιʔεͷ Pruning ͸ߦΘΕͳ͍
    

    View Slide

15. Tools
    • αϙʔτ͍ͯ͠Δ apply ํ๏
    • kustomize
    • Helm charts
    • Ksonnet
    • YAML/JSON/Jsonnet manifest ͷσΟϨΫτϦ
    • ϓϥάΠϯ (ࣗ࡞όΠφϦ΋࢖͑Δ)
    

    View Slide

16. Application of Applications
    • Application Ͱ 

    Application Λ؅ཧ͢Δ
    

    View Slide

17. Application of Applications
    • kustomize ͷྫ:
    root.yaml
    

    View Slide

18. Application of Applications
    • kustomize ͷྫ:
    root.yaml
    ͜͜ͷ path ࢦఆͰ
    

    View Slide

19. Application of Applications
    • kustomize ͷྫ:
    root.yaml
    ͜͜ͷ path ࢦఆͰ
    application-of-applications
    σΟϨΫτϦͷ
    kustomization.yaml ͕ࢀর͞ΕΔ
    

    View Slide

20. Application of Applications
    • kustomize ͷྫ:
    kustomization.yaml
    

    View Slide

21. Application of Applications
    • kustomize ͷྫ:
    kustomization.yaml
    kustomize ͷ

    resources Ͱ root ʹඥͮ͘
    Application Λࢦఆ͢Δ
    

    View Slide

22. Application of Applications
    • kustomize ͷྫ:
    root ʹͳΔ
    Application Λ apply ͢Δ
    

    View Slide

23. Application of Applications
    • kustomize ͷྫ:
    

    View Slide

24. Application of Applications
    • kustomize ͷྫ:
    root ʹͳΔ
    Application Λ apply ͚ͨͩ͠Ͱ 

    root ʹඥͮ͘ Application ΋উखʹద༻͞ΕΔ
    

    View Slide

25. Application of Applications
    UI ͔Β͸͜ͷΑ͏ͳײ͡Ͱ

    දࣔ͞ΕΔ
    

    View Slide

26. Application of Applications
    • kustomize ͷྫ:
    ͜ΕΒͷ Application ͸
    GitOps Ͱࣗಈతʹ Sync ͞ΕΔ
    (feature ϒϥϯνͷ manifest Λ

    ద༻͍ͨ͠Έ͍ͨͳঢ়گͷ࣌ʹָ)
    

    View Slide

27. Application of Applications
    revision Λॻ͖׵͑ͨ Pull Request Λ

    merge ͢Δͱ feature ϒϥϯνͷ

    manifest ΛࢀরͰ͖Δ
    

    View Slide

28. AppProject
    • Application ͷ

    ࿦ཧతͳάϧʔϓΛද͢
    • Role ͱ͔΋ఆٛͰ͖Δ

    (ৄ͘͠͸ޙड़)
    

    View Slide

29. Argo CDͷ
    RBAC
    

    View Slide

30. Argo CD ͷೝূ
    • ϩάΠϯը໘:
    

    View Slide

31. Argo CD ͷೝূ
    • ϩάΠϯը໘: User ͱ Password Λ

    ೖྗ͢Δεϖʔε͕͋Δ͕

    Argo CD Ͱ͸૊ΈࠐΈͷ

    admin Ҏ֎ͷϢʔβ͸ଘࡏ͠ͳ͍
    

    View Slide

32. Argo CD ͷೝূ
    • ϩάΠϯը໘:
    admin Ҏ֎ͷશͯͷϢʔβ͸
    SSO Λհͯ͠ϩάΠϯ͢Δ

    ඞཁ͕͋Δ

    (͜ͷ৔߹͸ GitHub Λ࢖༻)
    

    View Slide

33. Argo CD ͷೝূ
    • Argo CD Ͱ SSO Λߦ͏ํ๏͸ 2 छྨ
    • όϯυϧ͞ΕͯΔ Dex Λ࢖༻͢Δ
    • طଘͷ OIDC provider Λ࢖༻͢Δ
    

    View Slide

34. Argo CD ͷೝূ
    • Argo CD Ͱ SSO Λߦ͏ํ๏͸ 2 छྨ
    • όϯυϧ͞ΕͯΔ Dex Λ࢖༻͢Δ
    • طଘͷ OIDC provider Λ࢖༻͢Δ
    ࠓճ͸ Dex Λ࢖ͬͯ

    GitHub Ͱೝূ͢Δ࿩Λ͠·͢
    

    View Slide

35. Dex Λ༻͍ͯ GitHub Ͱೝূ͢Δ
    • Argo CD Ͱ͸ Dex ͱ͍͏

    OIDC provider ͕όϯυϧ͞Ε͍ͯΔ
    • https://github.com/dexidp/dex
    

    View Slide

36. Dex Λ༻͍ͯ GitHub Ͱೝূ͢Δ
    • GitHub Ͱ OAuth application Λ࡞ͬͯ

    `argocd-cm` ͱ͍͏ ConfigMap ʹ

    ઃఆΛهࡌ͢Δ
    

    View Slide

37. Dex Λ༻͍ͯ GitHub Ͱೝূ͢Δ
    • ConfigMap ͷྫ:
    

    View Slide

38. Dex Λ༻͍ͯ GitHub Ͱೝূ͢Δ
    • ConfigMap ͷྫ:
    ൃߦͨ͠ clientID ͱ clientSecret
    $dex.github.clientSecret
    Έ͍ͨʹॻ͘͜ͱͰ

    Kubernetes ͷ Secret ͔Β

    ஋ΛಡΈࠐΜͰ͘ΕΔ
    

    View Slide

39. Dex Λ༻͍ͯ GitHub Ͱೝূ͢Δ
    • ConfigMap ͷྫ:
    ϩάΠϯͰ͖Δ GitHub org ͱ
    Team ͷઃఆ
    ͜ͷ৔߹͸ `classmethod` ͱ͍͏
    GitHub org ͷ `sre-team` ͔͠
    ϩάΠϯͰ͖ͳ͍
    

    View Slide

40. Role
    • GitHub-org:team

    ʹରͯ͠ AppProject ʹ

    ඥͮ͘Role ΛఆٛͰ͖Δ
    

    View Slide

41. Role
    • Argo CD ͷ Web UI ͔Β

    Delete, Edit ͱ͔͕Ͱ͖ͨΓ͢Δ໰୊΋ 

    Role Λ࢖੍ͬͯޚ͢Δ͜ͱ͕Ͱ͖Δ
    

    View Slide

42. Argo CDͷ
    Sync
    

    View Slide

43. Sync Phases
    • Argo CD ͷ Sync ʹ͸େ͖͘෼͚ͯ 3 ͭͷϑΣʔζ͕͋Δɹ
    PreSync Sync PostSync
    

    View Slide

44. Sync Phases
    • Argo CD ͷ Sync ʹ͸େ͖͘෼͚ͯ 3 ͭͷϑΣʔζ͕͋Δɹ
    PreSync Sync PostSync
    manifest ͷద༻લʹ࣮ߦ͞ΕΔ
    

    View Slide

45. Sync Phases
    • Argo CD ͷ Sync ʹ͸େ͖͘෼͚ͯ 3 ͭͷϑΣʔζ͕͋Δɹ
    PreSync Sync PostSync
    manifest ͷద༻ʹ

    ؔ࿈࣮ͯ͠ߦ͞ΕΔ
    

    View Slide

46. Sync Phases
    • Argo CD ͷ Sync ʹ͸େ͖͘෼͚ͯ 3 ͭͷϑΣʔζ͕͋Δɹ
    PreSync Sync PostSync
    manifest ͷద༻ޙʹ࣮ߦ͞ΕΔ
    

    View Slide

47. • Argo CD ͷ Sync ʹ͸େ͖͘෼͚ͯ 3 ͭͷϑΣʔζ͕͋Δɹ
    PreSync Sync
    ΞϓϦέʔγϣϯ
    ͷσϓϩΠ
    DB ͷ

    ϚΠάϨʔγϣϯ
    PostSync
    Sync Phases
    ΞϓϦέʔγϣϯͷσϓϩΠલʹ

    Kubernetes ͷ Job Ͱ

    DB ͷϚΠάϨʔγϣϯΛ࣮ߦ
    

    View Slide

48. Sync Phases and Waves
    • Argo CD ͷ Sync ʹ͸େ͖͘෼͚ͯ 3 ͭͷϑΣʔζ͕͋Δɹ
    PreSync
    ΞϓϦέʔγϣϯͷσϓϩΠલʹ

    Kubernetes ͷ Job Ͱ

    DB ͷϚΠάϨʔγϣϯΛ࣮ߦ
    DB ͷ

    ϚΠάϨʔγϣϯ
    

    View Slide

49. Sync Phases
    • Argo CD ͷ Sync ʹ͸େ͖͘෼͚ͯ 3 ͭͷϑΣʔζ͕͋Δɹ
    PreSync
    DB ͷ

    ϚΠάϨʔγϣϯ
    annotation ʹهࡌΛ͢Δͱ

    Argo CD ͕هࡌͨ͠ϑΣʔζͰ

    ࣮ߦͯ͘͠ΕΔ
    

    View Slide

50. • Argo CD ͷ Sync ʹ͸େ͖͘෼͚ͯ 3 ͭͷϑΣʔζ͕͋Δɹ
    PreSync
    DB ͷ

    ϚΠάϨʔγϣϯ
    PreSync ͷϑΣʔζ͕

    ऴΘͬͨΒ Job Λ࡟আ
    Sync Phases
    

    View Slide

51. Sync Waves
    • ֤ϑΣʔζ಺Ͱͷ manifest ͷద༻ॱΛ੍ޚͰ͖Δ
    PreSync Sync PostSync
    Job Job
    Pod
    Job
    1
    2
    3
    v1.1.0 ͔Βͷ৽ػೳ
    

    View Slide

52. Sync Waves
    Sync
    Job
    Pod
    Job
    1
    2
    3
    • ֤ϑΣʔζ಺Ͱͷ manifest ͷద༻ॱΛ੍ޚͰ͖Δ
    

    View Slide

53. Sync Waves
    Sync
    Job
    Pod
    Job
    1
    2
    3
    • ֤ϑΣʔζ಺Ͱͷ manifest ͷద༻ॱΛ੍ޚͰ͖Δ
    `argocd.argoproj.io/sync-wave`
    ͱ͍͏ annotaion ʹ

    ੔਺஋Λࢦఆ͢Δ
    

    View Slide

54. ·ͱΊ
    

    View Slide

55. ·ͱΊ
    • Argo CD ͸Ϧονͳ Web UI Ͱ GitOps Ͱ͖Δπʔϧ
    • ৭ʑͱࡉ͔͍ػೳͱ͔΋ॆ࣮ͯ͠Δ
    • ެࣜͷυΩϡϝϯτ΋ॆ࣮ͯ͠ΔͷͰΈΑ͏!
    • https://argoproj.github.io/argo-cd/
    

    View Slide

56. Thank You!
    @ponde_m
    

    View Slide