Summary

In this chapter, we went through different options for how we can accomplish user administration and access control. We started with how we can create new local users and assign them rights in order to be able to disable the admin account as it would be too risky to use it for daily operations. Then, we discovered what the options are for service accounts and how to access Argo CD from a pipeline or other types of automations. Local users are great for small companies, but SSO is becoming more relevant because it is more secure and has the power to manage everything from one place Argo CD supports many SSO providers either directly or via Dex; the official documentation has a lot of examples on how to set that up and we saw how we can make them more secure.

In the next chapter, we will dive deep into how to create a Kubernetes cluster and then deploy applications on it with Argo CD following the app-of-apps pattern.