# ArgoCD

ArgoCD can be integrated with Delivery Shield by following the steps given below:

### Prerequisites:

* Delivery Shield
* OPA
* ArgoCD with applications
* Git
* Github account with access to applications in gitops repo

### Integrating ArgoCD in Delivery Shield:

Follow the steps given below to integrate ArgoCD with Delivery Shield.

1. Connect to the cluster where ArgoCD is running and run the command given below:

```
curl -o argocd-notifications-cm.yaml 
https://raw.githubusercontent.com/OpsMx/argocd-ssd/main/argocd-notifications-cm.yaml
```

2. Update the values given below in **argocd-notifications-cm.yaml**.

* **argocdUrl**: Provide the argocd endpoint.
* **argocdName**: Enter a name for the argocd.
* **argoEnvironmentList**: Provide the target cluster env name and IP address. You can provide multiple target cluster details here. For example: `dev|https://12.34.56.78;staging|https://kubernetes.default.svc`
* **Url**: Provide the SSD RabbitMQ external IP address or DNS endpoint. For example: 

{% code overflow="wrap" %}

```
kubectl patch cm argocd-notifications-cm -n argocd --type merge --patch-file argocd-notifications-cm.yaml
```

{% endcode %}

3. Replace your SSD RabbitMQ username and password in the commands given below and run in your cluster. **Note:** Default username and password is given in the commands.

{% code overflow="wrap" %}

```
kubectl patch secret argocd-notifications-secret  --patch="{\"data\": { \"rabbitmq-password\"xxxxxxxxxxxxxxxxxxxxxxxxxxxxx" }}" -n argocd

kubectl patch secret argocd-notifications-secret  --patch="{\"data\": { \"rabbitmq-username\"xxxxxxxxxxxxxxxxxxxxxxxxxxxxx" -n argocd
```

{% endcode %}

4. Run the commands given below to add sidecar containers to the **argocd-repo-server** pod.

{% code overflow="wrap" %}

```
kubectl apply -n argocd -f https://raw.githubusercontent.com/OpsMx/argocd-ssd/main/cmp-config.yaml

curl -o volumes.yaml https://raw.githubusercontent.com/OpsMx/argocd-ssd/main/volumes.yaml

kubectl patch deploy argocd-repo-server -n argocd --patch-file volumes.yaml

curl -o argocd-repo-server-patch.yaml https://raw.githubusercontent.com/OpsMx/argocd-ssd/main/argocd-repo-server-patch.yaml

sed -i 's/SSD-OPA.EXAMPLE.COM/<replace with OPA ingress>/g' argocd-repo-server-patch.yaml

kubectl patch deploy argocd-repo-server -n argocd --patch-file argocd-repo-server-patch.yaml
```

{% endcode %}

5. Add the labels given below, in all the services deployment files under the template.metadata.labels.

```
ssd.admissionreview.accountname: <Target cluster env name>
ssd.admissionreview.appname: <argocd application name >
```

6. Edit the **opa-config cm** of OPA and point the services endpoint to ssd-opa endpoint at target cluster.
7. The ArgoCD integration to Delivery Shield is completed.&#x20;

### Troubleshooting:

To check if the integration is working, trigger the CI/CD process once again. If the data is visible in Delivery Shield, the integrations works.  \
If you face any issues while integrating ArgoCD to Secure Software Delivery feel free to contact [OpsMx support team](https://opsmx.freshdesk.com/support/login).&#x20;