{"id":6845,"date":"2022-10-28T22:33:19","date_gmt":"2022-10-28T13:33:19","guid":{"rendered":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=6845"},"modified":"2025-08-05T09:52:27","modified_gmt":"2025-08-05T00:52:27","slug":"kubernetes-argocd-%ec%84%a4%ec%b9%98","status":"publish","type":"post","link":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=6845","title":{"rendered":"Kubernetes – ArgoCD \uc124\uce58"},"content":{"rendered":"

Kubernetes – ArgoCD \uc124\uce58<\/h1>\n

ArgoCD \uc124\uce58<\/h2>\n
kubectl create namespace argocd\nkubectl apply -n argocd -f https:\/\/raw.githubusercontent.com\/argoproj\/argo-cd\/stable\/manifests\/install.yaml<\/code><\/pre>\n
kubectl get svc argocd-server -n argocd<\/code><\/pre>\n
\ud0c0\uc785\uc744 NodePort \ub85c \ubcc0\uacbd\ud574\uc900\ub2e4.<\/p>\n
kubectl edit svc argocd-server -n argocd\n---------------------------\nspec:\n  clusterIP: 10.107.7.97\n  clusterIPs:\n  - 10.107.7.97\n  internalTrafficPolicy: Cluster\n  ipFamilies:\n  - IPv4\n  ipFamilyPolicy: SingleStack\n  ports:\n  - name: http\n    port: 80\n    nodePort: 30100            # \uc5ec\uae30\n    targetPort: 8080\n - name: https\n   port: 443\n   protocol: TCP\n   targetPort: 8080\n  selector:\n    app.kubernetes.io\/name: argocd-server\n  sessionAffinity: None\n  type: NodePort                # \uc5ec\uae30\n---------------------------<\/code><\/pre>\n
kubectl get svc argocd-server -n argocd<\/code><\/pre>\n
https:\/\/\uc6cc\ucee4\ub178\ub4dcIP:30100\/<\/a> \ub85c \uc811\uc18d\ud560 \uc218 \uc788\ub2e4.
\n(HTTPS \uc811\uc18d\uc774\uace0 \uacbd\uace0\uac00 \ub728\uc9c0\ub9cc \ubb34\uc2dc\ud558\uace0 \uc811\uc18d\ud560 \uc218 \uc788\ub2e4.)<\/p>\n
kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d; echo<\/code><\/pre>\n
admin\/\ube44\ubc00\ubc88\ud638 \ub97c \uc774\uc6a9\ud574 \ub85c\uadf8\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n
https \ube44\ud65c\uc131\ud654<\/h2>\n
\uc544\ub798 \uba85\ub839\uc73c\ub85c https \uc804\ud658\uc774 \uac15\uc81c\ub418\ub294 \uac83\uc744 \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n
skyer9@notebook:~\/work\/cert2$ kubectl get svc -n argocd\nNAME                                      TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                      AGE\nargocd-server                             ClusterIP   10.98.113.43     <none>        80\/TCP,443\/TCP               7d22h\n\ncurl http:\/\/10.98.113.43\/\n<a href="https:\/\/10.98.113.43\/">Temporary Redirect<\/a>.<\/code><\/pre>\n
server.insecure: "true" \uc744 \ucd94\uac00\ud574 \uc900\ub2e4.<\/p>\n
kubectl edit cm argocd-cmd-params-cm -n argocd\n\n......\napiVersion: v1\ndata:\n  server.insecure: "true"\n......<\/code><\/pre>\n
\uc0dd\uc131\ub418\uc5b4 \uc788\ub294 Pod \ub97c \uc0ad\uc81c\ud55c\ub2e4.<\/p>\n
kubectl get pod -n argocd\nkubectl delete pod argocd-server-7b4888c795-qkm4n -n argocd\nkubectl get pod -n argocd<\/code><\/pre>\n
kubectl get svc -n argocd\ncurl http:\/\/10.98.113.43\/<\/code><\/pre>\n
SSL \uc778\uc99d\uc11c \uc801\uc6a9\ud558\uae30<\/h2>\n
kubectl create secret tls argocd-server-tls \\\n  --cert=\/home\/skyer9\/cert\/fullchain.pem \\\n  --key=\/home\/skyer9\/cert\/privkey.pem \\\n  -n argocd<\/code><\/pre>\n
kubectl patch configmap argocd-cmd-params-cm -n argocd --patch '{"data":{"server.insecure":"false"}}'<\/code><\/pre>\n
kubectl patch deployment argocd-server -n argocd --patch '\n{\n  "spec": {\n    "template": {\n      "spec": {\n        "containers": [\n          {\n            "name": "argocd-server",\n            "volumeMounts": [\n              {\n                "name": "tls-cert",\n                "mountPath": "\/app\/config\/tls",\n                "readOnly": true\n              }\n            ]\n          }\n        ],\n        "volumes": [\n          {\n            "name": "tls-cert",\n            "secret": {\n              "secretName": "argocd-server-tls"\n            }\n          }\n        ]\n      }\n    }\n  }\n}'<\/code><\/pre>\n
kubectl patch svc argocd-server -n argocd --patch '\n{\n  "spec": {\n    "ports": [\n      {\n        "name": "http",\n        "port": 80,\n        "nodePort": 30100,\n        "targetPort": 8080\n      },\n      {\n        "name": "https",\n        "port": 443,\n        "nodePort": 30443,\n        "protocol": "TCP",\n        "targetPort": 8080\n      }\n    ]\n  }\n}'<\/code><\/pre>\n
kubectl rollout restart deployment argocd-server -n argocd\nkubectl rollout status deployment argocd-server -n argocd<\/code><\/pre>\n
https:\/\/\uc6cc\ucee4\ub178\ub4dcIP:30443\/<\/a> \ub85c \uc811\uc18d\ud560 \uc218 \uc788\ub2e4.<\/p>\n
"\uc8fc\uc758 \uc694\ud568" \uc774\ub77c\ub294 \ubb38\uad6c\uac00 \ub0a8\uc544\uc788\uc744 \uc218 \uc788\ub2e4.
\n\uc774\ub7f4 \ub54c\ub294 \ub2e4\ub978 \ube0c\ub77c\uc6b0\uc800(\uc5e3\uc9c0, \uc0ac\ud30c\ub9ac \ub4f1\ub4f1) \ub97c \uc774\uc6a9\ud574 \uc811\uc18d\ud558\uba74 "\uc8fc\uc758 \uc694\ud568" \ubb38\uad6c\uac00 \ud45c\uc2dc\ub418\uc9c0 \uc54a\ub294 \uac83\uc744 \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"
Kubernetes – ArgoCD \uc124\uce58 ArgoCD \uc124\uce58 kubectl create namespace argocd kubectl apply -n argocd -f https:\/\/raw.githubusercontent.com\/argoproj\/argo-cd\/stable\/manifests\/install.yaml kubectl get svc argocd-server -n argocd \ud0c0\uc785\uc744 NodePort \ub85c \ubcc0\uacbd\ud574\uc900\ub2e4. kubectl edit svc argocd-server -n argocd ————————— spec: clusterIP: 10.107.7.97 clusterIPs: – 10.107.7.97 internalTrafficPolicy: Cluster ipFamilies: – IPv4 ipFamilyPolicy: SingleStack ports: – name: http port: 80 nodePort: 30100 #\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[],"class_list":["post-6845","post","type-post","status-publish","format-standard","hentry","category-kubernetes"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6845"}],"version-history":[{"count":8,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6845\/revisions"}],"predecessor-version":[{"id":10622,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/6845\/revisions\/10622"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}