├── .github
    └── workflows
    │   └── docker-image.yml
├── README.md
├── argo-cd-setup
    ├── provider.tf
    ├── setup.tf
    └── values
    │   └── argocd.yaml
├── argocd-cicd-setup
    ├── Dockerfile
    ├── application.yaml
    ├── dev
    │   ├── deployment.yaml
    │   └── namespace.yaml
    ├── project.yaml
    ├── script
    │   └── index.html
    └── ssh-secret.yaml
├── docs
    ├── cicd2.png
    └── test.png
└── eks-setup
    ├── READEME.MD
    ├── eks.tf
    ├── nat.tf
    ├── provider.tf
    ├── route-table.tf
    ├── subnets.tf
    ├── variables.tf
    └── vpc.tf


/.github/workflows/docker-image.yml:
--------------------------------------------------------------------------------
 1 | name: Deploy to Kubernetes
 2 | 
 3 | on:
 4 |   push:
 5 |     branches: [master]
 6 |   pull_request:
 7 |     branches: [master]
 8 | 
 9 | env:
10 |   DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
11 |   DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
12 | 
13 | jobs:
14 |   deploy:
15 |     runs-on: ubuntu-latest
16 | 
17 |     steps:
18 |       # Checkout the code from GitHub repository
19 |       - name: Checkout code
20 |         uses: actions/checkout@v2
21 |         
22 |       - name: Login to Docker Hub
23 |         uses: docker/login-action@v1
24 |         with:
25 |           username: ${{ secrets.DOCKER_USERNAME }}
26 |           password: ${{ secrets.DOCKER_PASSWORD }}  
27 | 
28 |       # Build Docker image and push it to Docker Hub
29 |       - name: Build and push Docker image
30 |         run: |
31 |           docker build -t ${DOCKER_USERNAME}/my-app:latest -f argocd-cicd-setup/Dockerfile .
32 |           docker push ${DOCKER_USERNAME}/my-app:latest
33 |       - name: Login to GitHub Packages
34 |         uses: actions/checkout@v3
35 |         with:
36 |           repository: ravindrasinghh/argocd-setup
37 |           ref: 'master'
38 |           token: ${{ secrets.G_TOKEN }}
39 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # argocd-setup
 2 | # Argo CD - Declarative Continuous Delivery for Kubernetes
 3 | 
 4 | ## What is Argo CD?
 5 | 
 6 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
 7 | 
 8 | ![Argo CD UI](docs/cicd2.png)
 9 | 
10 | 
11 | ## Why Argo CD?
12 | 
13 | 1. Application definitions, configurations, and environments should be declarative and version controlled.
14 | 1. Application deployment and lifecycle management should be automated, auditable, and easy to understand.
15 | 
16 | ## Who uses Argo CD?
17 | 
18 | [Official Argo CD user list](USERS.md)
19 | 
20 | ## Documentation
21 | 
22 | To learn more about Argo CD [go to the complete documentation](https://argo-cd.readthedocs.io/).
23 | Check live demo at https://youtu.be/aknJrQH8TMM.
24 | 


--------------------------------------------------------------------------------
/argo-cd-setup/provider.tf:
--------------------------------------------------------------------------------
 1 | provider "helm" {
 2 |   kubernetes {
 3 |     config_path = "~/.kube/config"
 4 |   }
 5 | }
 6 | terraform {
 7 |   required_version = ">= 1.0.0"
 8 | 
 9 |   required_providers {
10 |     helm = {
11 |       source  = "hashicorp/helm"
12 |       version = "= 2.5.1"
13 |     }
14 |   }
15 | }
16 | 


--------------------------------------------------------------------------------
/argo-cd-setup/setup.tf:
--------------------------------------------------------------------------------
 1 | resource "helm_release" "argocd" {
 2 |   name             = "argocd"
 3 |   repository       = "https://argoproj.github.io/argo-helm"
 4 |   chart            = "argo-cd"
 5 |   namespace        = "argocd"
 6 |   create_namespace = true
 7 |   version          = "3.35.4"
 8 |   values           = [file("values/argocd.yaml")]
 9 | }
10 | # helm install argocd -n argocd -f values/argocd.yaml
11 | 


--------------------------------------------------------------------------------
/argo-cd-setup/values/argocd.yaml:
--------------------------------------------------------------------------------
 1 | ---
 2 | global:
 3 |   image:
 4 |     tag: "v2.6.6"
 5 | 
 6 | dex:
 7 |   enabled: false
 8 | 
 9 | server:
10 |   extraArgs:
11 |     - --insecure
12 | 


--------------------------------------------------------------------------------
/argocd-cicd-setup/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM ubuntu:latest
 2 | LABEL name="Ravindra Singh"
 3 | LABEL email="ravindrasinghh.me@gmail.com"
 4 | ENV UBUNTU_HOME=/var/www/html/
 5 | RUN apt-get update -y
 6 | ENV DEBIAN_FRONTEND noninteractive	
 7 | RUN apt-get -y install tzdata
 8 | RUN apt-get install apache2 -y
 9 | WORKDIR UBUNTU_HOME
10 | COPY argocd-cicd-setup/script/index.html ${UBUNTU_HOME}
11 | EXPOSE 80
12 | CMD ["apachectl" , "-D","FOREGROUND"]
13 | 


--------------------------------------------------------------------------------
/argocd-cicd-setup/application.yaml:
--------------------------------------------------------------------------------
 1 | ---
 2 | apiVersion: argoproj.io/v1alpha1
 3 | kind: Application
 4 | metadata:
 5 |   name: my-application
 6 |   namespace: argocd
 7 |   # Finalizer that ensures that project is not deleted until it is not referenced by any application
 8 |   finalizers:
 9 |     - resources-finalizer.argocd.argoproj.io
10 | spec:
11 |   project: my-app-project
12 |   source:
13 |     repoURL: 
14 |     targetRevision: HEAD
15 |     path: environments/dev/my-app
16 |   destination:
17 |     server: https://kubernetes.default.svc
18 |     namespace: my-app
19 |   syncPolicy:
20 |     automated:
21 |       prune: true
22 |       selfHeal: true
23 |       allowEmpty: false
24 |       
25 |     syncOptions:
26 |       - Validate=true
27 |       - CreateNamespace=true
28 |       - PrunePropagationPolicy=foreground
29 |       - PruneLast=true
30 | 


--------------------------------------------------------------------------------
/argocd-cicd-setup/dev/deployment.yaml:
--------------------------------------------------------------------------------
 1 | ---
 2 | apiVersion: apps/v1
 3 | kind: Deployment
 4 | metadata:
 5 |   name: my-custom-container
 6 |   namespace: my-app
 7 | spec:
 8 |   replicas: 1
 9 |   selector:
10 |     matchLabels:
11 |       app: nginx
12 |   template:
13 |     metadata:
14 |       labels:
15 |         app: nginx
16 |     spec:
17 |       containers:
18 |         - name: my-container
19 |           imagePullPolicy: Always
20 |           image: ravindrasingh6969/my-app:latest
21 |           ports:
22 |             - containerPort: 80
23 | 


--------------------------------------------------------------------------------
/argocd-cicd-setup/dev/namespace.yaml:
--------------------------------------------------------------------------------
1 | ---
2 | apiVersion: v1
3 | kind: Namespace
4 | metadata:
5 |   name: my-app
6 | 


--------------------------------------------------------------------------------
/argocd-cicd-setup/project.yaml:
--------------------------------------------------------------------------------
 1 | apiVersion: argoproj.io/v1alpha1
 2 | kind: AppProject
 3 | metadata:
 4 |   name: my-app-project
 5 |   namespace: argocd
 6 |   # Finalizer that ensures that project is not deleted until it is not referenced by any application
 7 |   finalizers:
 8 |     - resources-finalizer.argocd.argoproj.io
 9 | spec:
10 |   syncPolicy:
11 |     automated:
12 |       prune: true
13 |       selfHeal: true
14 |   # Project description
15 |   description: Learning CICD
16 |   # Allow manifests to deploy from any Git repos
17 |   sourceRepos:
18 |   - '*'
19 |   destinations:
20 |   - namespace: my-app
21 |     server: https://kubernetes.default.svc
22 |   # Deny all cluster-scoped resources from being created, except for Namespace
23 |   clusterResourceWhitelist:
24 |   - group: ''
25 |     kind: Namespace
26 | 
27 |   #  is a feature that allows you to automatically delete Kubernetes resources that are no longer managed by any application in the ArgoCD cluster. 
28 |   orphanedResources:
29 |     warn: false
30 | 


--------------------------------------------------------------------------------
/argocd-cicd-setup/script/index.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 | 
 4 | <head>
 5 |     <title>Style Property</title>
 6 | </head>
 7 | 
 8 | <body style="background-image: -webkit-linear-gradient(left, green, yellow)">
 9 |     <h1>Welcome to the Automation World!</h1>
10 | </body>
11 | 
12 | </html>
13 | 
14 | 


--------------------------------------------------------------------------------
/argocd-cicd-setup/ssh-secret.yaml:
--------------------------------------------------------------------------------
 1 | ---
 2 | apiVersion: v1
 3 | kind: Secret
 4 | metadata:
 5 |   name: github-ssh-secret
 6 |   namespace: argocd
 7 |   labels:
 8 |     argocd.argoproj.io/secret-type: repository
 9 | stringData:
10 |   url: git@github.com:ravindrasinghh/argocd-setup.git
11 |   sshPrivateKey: |
12 |     -----BEGIN OPENSSH PRIVATE KEY-----
13 |     b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
14 |     QyNTUxOQAAACD4VvJSOgw0f1q3ciDnuo1vLSENQp2+Pbi119YN01MymQAAAKD8mE3u/JhN
15 |     7gAAAAtzc2gtZWQyNTUxOQAAACD4VvJSOgw0f1q3ciDnuo1vLSENQp2+Pbi119YN01MymQ
16 |     AAAEATgwm3oJL8RAAni1KsHL/QAkc6HrQydJl+XCKNTyOG7/hW8lI6DDR/WrdyIOe6jW**
17 |     *****************************
18 |     -----END OPENSSH PRIVATE KEY-----
19 |   insecure: "false"
20 |   enableLfs: "true"
21 | 
22 | 
23 | # command to generate key
24 | # ssh-keygen -t ed25519 -f ~/.ssh/argocd
25 | 
26 | 


--------------------------------------------------------------------------------
/docs/cicd2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/ravindrasinghh/argocd-setup/92e7b45c19f4db0d46674e22b64214f6fedeca12/docs/cicd2.png


--------------------------------------------------------------------------------
/docs/test.png:
--------------------------------------------------------------------------------
1 | 
2 | 


--------------------------------------------------------------------------------
/eks-setup/READEME.MD:
--------------------------------------------------------------------------------
1 | #Create VPC and EKS Cluster in AWS Account
2 | 


--------------------------------------------------------------------------------
/eks-setup/eks.tf:
--------------------------------------------------------------------------------
  1 | resource "aws_iam_role" "demo" {
  2 |   name = "eks-cluster-demo"
  3 | 
  4 |   assume_role_policy = <<POLICY
  5 | {
  6 |   "Version": "2012-10-17",
  7 |   "Statement": [
  8 |     {
  9 |       "Effect": "Allow",
 10 |       "Principal": {
 11 |         "Service": "eks.amazonaws.com"
 12 |       },
 13 |       "Action": "sts:AssumeRole"
 14 |     }
 15 |   ]
 16 | }
 17 | POLICY
 18 | }
 19 | 
 20 | resource "aws_iam_role_policy_attachment" "demo-AmazonEKSClusterPolicy" {
 21 |   policy_arn = "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy"
 22 |   role       = aws_iam_role.demo.name
 23 | }
 24 | 
 25 | resource "aws_iam_role" "nodes" {
 26 |   name = "eks-node-group-nodes"
 27 | 
 28 |   assume_role_policy = jsonencode({
 29 |     Statement = [{
 30 |       Action = "sts:AssumeRole"
 31 |       Effect = "Allow"
 32 |       Principal = {
 33 |         Service = "ec2.amazonaws.com"
 34 |       }
 35 |     }]
 36 |     Version = "2012-10-17"
 37 |   })
 38 | }
 39 | 
 40 | resource "aws_iam_role_policy_attachment" "nodes-AmazonEKSWorkerNodePolicy" {
 41 |   policy_arn = "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
 42 |   role       = aws_iam_role.nodes.name
 43 | }
 44 | 
 45 | resource "aws_iam_role_policy_attachment" "nodes-AmazonEKS_CNI_Policy" {
 46 |   policy_arn = "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
 47 |   role       = aws_iam_role.nodes.name
 48 | }
 49 | 
 50 | resource "aws_iam_role_policy_attachment" "nodes-AmazonEC2ContainerRegistryReadOnly" {
 51 |   policy_arn = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
 52 |   role       = aws_iam_role.nodes.name
 53 | }
 54 | resource "aws_eks_cluster" "demo" {
 55 |   name     = var.cluster-name
 56 |   role_arn = aws_iam_role.demo.arn
 57 | 
 58 |   vpc_config {
 59 |     subnet_ids = [
 60 |       aws_subnet.private-us-east-1a.id,
 61 |       aws_subnet.private-us-east-1b.id,
 62 |       aws_subnet.public-us-east-1a.id,
 63 |       aws_subnet.public-us-east-1b.id
 64 |     ]
 65 |     endpoint_private_access = false
 66 |     endpoint_public_access = true
 67 |   }
 68 | 
 69 |   depends_on = [aws_iam_role_policy_attachment.demo-AmazonEKSClusterPolicy]
 70 | }
 71 | 
 72 | 
 73 | resource "aws_eks_node_group" "private-nodes" {
 74 |   cluster_name    = aws_eks_cluster.demo.name
 75 |   node_group_name = "private-nodes"
 76 |   node_role_arn   = aws_iam_role.nodes.arn
 77 | 
 78 |   subnet_ids = [
 79 |     aws_subnet.private-us-east-1a.id,
 80 |     aws_subnet.private-us-east-1b.id
 81 |   ]
 82 | 
 83 |   capacity_type  = "ON_DEMAND"
 84 |   instance_types = ["t3.small"]
 85 | 
 86 |   scaling_config {
 87 |     desired_size = 1
 88 |     max_size     = 5
 89 |     min_size     = 0
 90 |   }
 91 | 
 92 |   update_config {
 93 |     max_unavailable = 1
 94 |   }
 95 | 
 96 |   labels = {
 97 |     role = "general"
 98 |   }
 99 | 
100 | 
101 |   depends_on = [
102 |     aws_iam_role_policy_attachment.nodes-AmazonEKSWorkerNodePolicy,
103 |     aws_iam_role_policy_attachment.nodes-AmazonEKS_CNI_Policy,
104 |     aws_iam_role_policy_attachment.nodes-AmazonEC2ContainerRegistryReadOnly,
105 |   ]
106 | }
107 | 


--------------------------------------------------------------------------------
/eks-setup/nat.tf:
--------------------------------------------------------------------------------
 1 | resource "aws_eip" "nat" {
 2 |   vpc = true
 3 | 
 4 |   tags = {
 5 |     Name = "nat"
 6 |   }
 7 | }
 8 | 
 9 | resource "aws_nat_gateway" "nat" {
10 |   allocation_id = aws_eip.nat.id
11 |   subnet_id     = aws_subnet.public-us-east-1a.id
12 | 
13 |   tags = {
14 |     Name = "nat"
15 |   }
16 | 
17 |   depends_on = [aws_internet_gateway.igw]
18 | }
19 | 


--------------------------------------------------------------------------------
/eks-setup/provider.tf:
--------------------------------------------------------------------------------
 1 | provider "aws" {
 2 |   region = "us-east-1"
 3 | }
 4 | 
 5 | terraform {
 6 |   required_providers {
 7 |     aws = {
 8 |       source  = "hashicorp/aws"
 9 |       version = "~> 3.0"
10 |     }
11 |   }
12 | }
13 | 


--------------------------------------------------------------------------------
/eks-setup/route-table.tf:
--------------------------------------------------------------------------------
 1 | resource "aws_route_table" "private" {
 2 |   vpc_id = aws_vpc.main.id
 3 | 
 4 |   route = [
 5 |     {
 6 |       cidr_block                 = "0.0.0.0/0"
 7 |       nat_gateway_id             = aws_nat_gateway.nat.id
 8 |       carrier_gateway_id         = ""
 9 |       destination_prefix_list_id = ""
10 |       egress_only_gateway_id     = ""
11 |       gateway_id                 = ""
12 |       instance_id                = ""
13 |       ipv6_cidr_block            = ""
14 |       local_gateway_id           = ""
15 |       network_interface_id       = ""
16 |       transit_gateway_id         = ""
17 |       vpc_endpoint_id            = ""
18 |       vpc_peering_connection_id  = ""
19 |     },
20 |   ]
21 | 
22 |   tags = {
23 |     Name = "private"
24 |   }
25 | }
26 | 
27 | resource "aws_route_table" "public" {
28 |   vpc_id = aws_vpc.main.id
29 | 
30 |   route = [
31 |     {
32 |       cidr_block                 = "0.0.0.0/0"
33 |       gateway_id                 = aws_internet_gateway.igw.id
34 |       nat_gateway_id             = ""
35 |       carrier_gateway_id         = ""
36 |       destination_prefix_list_id = ""
37 |       egress_only_gateway_id     = ""
38 |       instance_id                = ""
39 |       ipv6_cidr_block            = ""
40 |       local_gateway_id           = ""
41 |       network_interface_id       = ""
42 |       transit_gateway_id         = ""
43 |       vpc_endpoint_id            = ""
44 |       vpc_peering_connection_id  = ""
45 |     },
46 |   ]
47 | 
48 |   tags = {
49 |     Name = "public"
50 |   }
51 | }
52 | 
53 | resource "aws_route_table_association" "private-us-east-1a" {
54 |   subnet_id      = aws_subnet.private-us-east-1a.id
55 |   route_table_id = aws_route_table.private.id
56 | }
57 | 
58 | resource "aws_route_table_association" "private-us-east-1b" {
59 |   subnet_id      = aws_subnet.private-us-east-1b.id
60 |   route_table_id = aws_route_table.private.id
61 | }
62 | 
63 | resource "aws_route_table_association" "public-us-east-1a" {
64 |   subnet_id      = aws_subnet.public-us-east-1a.id
65 |   route_table_id = aws_route_table.public.id
66 | }
67 | 
68 | resource "aws_route_table_association" "public-us-east-1b" {
69 |   subnet_id      = aws_subnet.public-us-east-1b.id
70 |   route_table_id = aws_route_table.public.id
71 | }
72 | 


--------------------------------------------------------------------------------
/eks-setup/subnets.tf:
--------------------------------------------------------------------------------
 1 | resource "aws_subnet" "private-us-east-1a" {
 2 |   vpc_id            = aws_vpc.main.id
 3 |   cidr_block        = "10.0.0.0/19"
 4 |   availability_zone = "us-east-1a"
 5 | 
 6 |   tags = {
 7 |     "Name"                                      = "private-us-east-1a"
 8 |     "kubernetes.io/role/internal-elb"           = "1"
 9 |     "kubernetes.io/cluster/${var.cluster-name}" = "owned"
10 |   }
11 | }
12 | 
13 | resource "aws_subnet" "private-us-east-1b" {
14 |   vpc_id            = aws_vpc.main.id
15 |   cidr_block        = "10.0.32.0/19"
16 |   availability_zone = "us-east-1b"
17 | 
18 |   tags = {
19 |     "Name"                                      = "private-us-east-1b"
20 |     "kubernetes.io/role/internal-elb"           = "1"
21 |     "kubernetes.io/cluster/${var.cluster-name}" = "owned"
22 |   }
23 | }
24 | 
25 | resource "aws_subnet" "public-us-east-1a" {
26 |   vpc_id                  = aws_vpc.main.id
27 |   cidr_block              = "10.0.64.0/19"
28 |   availability_zone       = "us-east-1a"
29 |   map_public_ip_on_launch = true
30 | 
31 |   tags = {
32 |     "Name"                                      = "public-us-east-1a"
33 |     "kubernetes.io/role/elb"                    = "1"
34 |     "kubernetes.io/cluster/${var.cluster-name}" = "owned"
35 |   }
36 | }
37 | 
38 | resource "aws_subnet" "public-us-east-1b" {
39 |   vpc_id                  = aws_vpc.main.id
40 |   cidr_block              = "10.0.96.0/19"
41 |   availability_zone       = "us-east-1b"
42 |   map_public_ip_on_launch = true
43 | 
44 |   tags = {
45 |     "Name"                                      = "public-us-east-1b"
46 |     "kubernetes.io/role/elb"                    = "1"
47 |     "kubernetes.io/cluster/${var.cluster-name}" = "owned"
48 |   }
49 | }
50 | 


--------------------------------------------------------------------------------
/eks-setup/variables.tf:
--------------------------------------------------------------------------------
1 | variable "cluster-name" {
2 |   description = "Enter eks cluster name - example like eks-demo, eks-dev etc"
3 |   type        = string
4 |   default     = "demo"
5 | }
6 | 


--------------------------------------------------------------------------------
/eks-setup/vpc.tf:
--------------------------------------------------------------------------------
 1 | resource "aws_vpc" "main" {
 2 |   cidr_block = "10.0.0.0/16"
 3 | 
 4 |   tags = {
 5 |     Name = "main"
 6 |   }
 7 | }
 8 | resource "aws_internet_gateway" "igw" {
 9 |   vpc_id = aws_vpc.main.id
10 | 
11 |   tags = {
12 |     Name = "igw"
13 |   }
14 | }
15 | 


--------------------------------------------------------------------------------