Managing Local Accounts using ArgoCD Operator

[jritter]

Hi folks,

Am I missing something or is it not possible at the moment to manage local accounts in ArgoCD [1] when using ArgoCD Operator?

We are using Dex to integrate with the OpenShift authentication, but this is not an ideal solution for automation. I'm looking for an elegant way to create local accounts and a token which could be used for automation through the API.

Any idea?

-- Juerg

[1] https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/

[iam-veeramalla]

Hi @jritter , Argo CD supports local users but it is not recommended.

Additional users for a very small team where use of SSO integration might be considered an overkill. The local users don't provide advanced features such as groups, login history etc. So if you need such features it is strongly recommended to use SSO.

More details here:
https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/

[iam-veeramalla]

Got it !! So you are looking for a place holder in the Argo CD CR to create Argo CD users ?

[jritter]

Exactly! Define a service account and assign a role to it within the ArgoCD CR, that's exactly what I'm looking for.

[iam-veeramalla]

I remember we had a similar discussion before. What do you think about this support @jannfis ?

[sylus]

Just was curious if we still were looking at adding this?

[herzogf]

We stumbled upon the same issue and I just wanted to point to redhat-developer/gitops-operator#370 (comment) and its suggestion to use the extraConfig field to add additional entries (e.g. user accounts) to the argocd-cm:
https://argocd-operator.readthedocs.io/en/latest/usage/extra-config/