Keycloak and ArgoCD integration

연동 설정 과정

• https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/keycloak/#keycloak-and-argocd-with-client-authentication
• https://www.youtube.com/watch?v=QtIXS-QKEWU

발생한 오류 해결

• ArgoCD 무한 리다이렉트 문제
  • https://stackoverflow.com/questions/76624577/argocd-ingress-kubernetes-too-many-redirects-even-with-insecure-nginx

ArgoCDAdmins, ArgoCDEngineers 에 대한 policy

p, role:engineer, applications, get, *, allow
p, role:engineer, applications, create, */*, allow
p, role:engineer, applications, update, */*, allow
p, role:engineer, applications, delete, */*, allow
p, role:engineer, applications, sync, */*, allow
p, role:engineer, applications, override, */*, allow

p, role:engineer, applications, action/*, */*, allow

p, role:engineer, applications, action/apps/Deployment/restart, */*, allow
p, role:engineer, applications, action/apps/ReplicaSet/restart, */*, allow
p, role:engineer, applications, action/apps/StatefulSet/restart, */*, allow

p, role:engineer, repositories, get, *, allow
p, role:engineer, repositories, create, *, allow
p, role:engineer, repositories, update, *, allow
p, role:engineer, repositories, delete, *, allow

p, role:engineer, projects, get, *, allow
p, role:engineer, projects, create, *, allow
p, role:engineer, projects, update, *, allow
p, role:engineer, projects, delete, *, allow

p, role:engineer, clusters, get, *, allow
p, role:engineer, logs, get, */*, allow
p, role:engineer, exec, create, */*, allow
p, role:engineer, certificates, get, *, allow
p, role:engineer, gpgkeys, get, *, allow

g, ArgoCDAdmins, role:admin
g, ArgoCDEngineer, role:engineer