Add basic authentication for ArgoCD with a ingress configuration

Author: Utwo

infra/argocd/basic-auth-sealed-secret.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: basic-auth
+  namespace: argocd
+spec:
+  encryptedData:
+    auth: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: basic-auth
+      namespace: argocd
+    type: Opaque

infra/argocd/ingress.yaml

@@ -0,0 +1,27 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: argocd
+  labels:
+    app.kubernetes.io/name: argocd
+  annotations:
+    "nginx.ingress.kubernetes.io/auth-type": basic
+    "nginx.ingress.kubernetes.io/auth-secret": basic-auth
+    "nginx.ingress.kubernetes.io/auth-realm": "Authentication Required - internal"
+    "cert-manager.io/cluster-issuer": letsencrypt
+spec:
+  rules:
+    - host: cd.code4.ro
+      http:
+        paths:
+          - pathType: Prefix
+            path: "/"
+            backend:
+              service:
+                name: argocd-server
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - cd.code4.ro
+      secretName: web-ssl

infra/argocd/kustomization.yaml

@@ -7,6 +7,8 @@ resources:
   - namespace.yaml
   - project.yaml
   - sealed-secret.yaml
+  - ingress.yaml
+  - basic-auth-sealed-secret.yaml
 
 patches:
   - path: argocd-rbac-cm.yaml