## Argo CD 搭配 Kustomize 實作 GitOps 部署 周育緯 ## About me • III DevOps contributor •8 年 System, DevOps 與 Backend 開發與維護經驗 •資展國際、工研院: Kubernetes, DevOps 講師 ## GitOps •雲原生 Continuous Deployment •所有部署都使用聲明式(declarative)腳本 需要維護5份yaml files •一份deployment yaml在用sed replace嗎？ •容易出錯 •把他打包成Helm chart嗎？在帶入variable嗎？ ·複雜度過高 ## Kustomize •讓無模板的yaml可以支援多種用途 •CNCF special interest groups (SIGs) 贊助 •Kubernetes 1.14版開始支援 ## Sample Repository commonLabels • commonAnnotations ### base customization.yaml 5 lines (5 sloc) | 120 Bytes 1 apiVersion: kustomize.config.k8s.io/v1beta1 2 kind: Kustomization 3 resources: 4 - flask-api-deploy.yaml 5 - flask-api-svc

Pulumi Kubernetes Operator Summary 18 Chapter 3-Templating Everything in Git Kustomize Helm Operators Combining Tools Summary ## Contents 22 Chapter 4–Git Workflows Separate work with Helm $ [2.2] $ and Kustomize $ [2.3] $ to render the YAML produced by those tools before applying them to the Kubernetes cluster. (We’ll look at Helm and Kustomize more closely in upcoming chapters GitOps Toolkit, and were based on controllers. These components include the source controller, the Kustomize controller, the Helm controller, the notification controller, and the image automation controller

triggertemplate.tekton.dev/update-from-master-template unchanged ## K ## Tools of the Trade # O Argo CD Kustomize ## Argo CD - What is It? Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes state with git repos - Works with a variety of Kubernetes deployment tools including: ☐ Helm o Kustomize ☐ Ksonnet/Jsonnet ☐ Directories of yaml ## - It is not a CI tool  ## Kustomize - What is it? Kustomize lets you customize raw, template-free YAML files for multiple purposes, leaving the original YAML untouched and usable as is. • Kustomize is a patching

customize /home/config/production # Build from github oc customize https://github.com/kubernetes-sigs/kustomize.git/examples/helloWorld?ref=v1.0.6 ###### 2.5.1.82. oc label 更新资源上的标签 ## 用法示例 # Update pod 'foo' 的帮助信息| |--input-dir（字符串）|从中读取现有捆绑包的目录。这个目录是捆绑包manifests 目录的父目录，它与--deploy-dir 目录不同。| |--kustomize-dir（字符串）|包含Kustomize 基础的目录以及用于捆绑包清单的kustomization.yaml 文件。默认路径为config/manifests。| |--manifests|生成捆绑包清单。| 部署。 ###### 7.2.5.2. customize generate kustomize 子命令包含为 Operator 生成 Kustomize 数据的子命令。 ####### 7.2.5.2.1. 清单 generate kustomize manifests 子命令生成或重新生成 Kustomize 基础以及 config/manifests 目录中的 kustomization

customize /home/config/production # Build from github oc customize https://github.com/kubernetes-sigs/kustomize.git/examples/helloWorld?ref=v1.0.6 ###### 2.7.1.84. oc label 更新资源上的标签 ## 用法示例 # Update pod 'foo' 的帮助信息| |--input-dir（字符串）|从中读取现有捆绑包的目录。这个目录是捆绑包manifests 目录的父目录，它与--deploy-dir 目录不同。| |--kustomize-dir（字符串）|包含Kustomize 基础的目录以及用于捆绑包清单的kustomization.yaml 文件。默认路径为config/manifests。| |--manifests|生成捆绑包清单。| 部署。 ###### 7.2.5.2. customize generate kustomize 子命令包含为 Operator 生成 Kustomize 数据的子命令。 ####### 7.2.5.2.1. 清单 generate kustomize manifests 子命令生成或重新生成 Kustomize 基础以及 config/manifests 目录中的 kustomization

memcached-sample app.kubernetes.io/part-of: memcached-operator app.kubernetes.io/managed-by: kustomize app.kubernetes.io/created-by: memcached-operator name: memcached-sample spec: size: 3 OpenShift ${OPERATOR_IMAGE:-""} operator_pull_policy: ${OPERATOR_PULL_POLICY:-"Always"} kustomize: ${KUSTOMIZE_PATH:-kustomize} env: K8S_AUTH_KUBECONFIG: ${KUBECONFIG:-"~/.kube/config"} verifier: make run 命令： 输出示例 出示例 现在，Operator 会监控 CR 的事件，创建 CR 将触发您的 Ansible 角色运行。 $ make install /usr/bin/kustomize build config/crd | kubectl apply -f - customresourcedefinition.apiextensions.k8s.io/memcacheds.cache

customize /home/config/production # Build from github oc customize https://github.com/kubernetes-sigs/kustomize.git/examples/helloWorld?ref=v1.0.6 ###### 2.5.1.83. oc label 更新资源上的标签 ## 用法示例 # Update pod 'foo' 的帮助信息| |--input-dir（字符串）|从中读取现有捆绑包的目录。这个目录是捆绑包manifests 目录的父目录，它与--deploy-dir 目录不同。| |--kustomize-dir（字符串）|包含Kustomize 基础的目录以及用于捆绑包清单的kustomization.yaml 文件。默认路径为config/manifests。| |--manifests|生成捆绑包清单。| 部署。 ###### 7.2.5.2. customize generate kustomize 子命令包含为 Operator 生成 Kustomize 数据的子命令。 ####### 7.2.5.2.1. 清单 generate kustomize manifests 子命令生成或重新生成 Kustomize 基础以及 config/manifests 目录中的 kustomization

jpg) ## KUSTOMIZE Apart from the Parameterized Templating, another approach to manage is Overlay Configuration. Kustomize is a configuration management tool based on this approach one. Kustomize works a replica count, volume mounts, etc. The “how” to change are the customization/config files. Kustomize file structure example: ![Image](/uploads/documents/4/6/a/3/46a3b9b9b93e62efd438edda91910c6e/p5_3

complex rollouts Rollback and rollforward to any Git commit ● Manifest templating support (Helm, Kustomize, etc) - Visual insight into sync status and history ![Image](/uploads/documents/1/a/b/f/1abf9 Configures webhooks for Tekton Pipelines for CI • Configures Argo CD for deployment to environments • Kustomize for environment-specific config • Integration with secret managers $ kam bootstrap $ kam environment

Transition Time: 2021-11-26T17:21:39Z Message: rpc error: code = Unknown desc = `kustomize build /tmp/https___git.com/ran-sites/siteconfigs/ --enable-alpha-plugins` failed exit status 1: Transition Time: 2021-11-26T17:21:39Z Message: rpc error: code = Unknown desc = `kustomize build /tmp/https___git.com/ran-sites/policies/ --enable-alpha-plugins` failed exit status 1: 2021/11/26 io/openshift4/ztp-site-generate-rhel8:v4.10 ADD example-cr2.yaml /kustomize/plugin/ran.openshift.io/v1/policygentemplate/source-crs/ ADD example-cr1.yaml /kustomize/plugin/ran.openshift.io/v1/policygentemplate/source-crs/