GitOps - Manage multiple EKS clusters with ArgoCD

AWS Command Line Interface

The AWS Command Line Interface (CLI) is a unified tool to manage your AWS services.

Install AWS CLI

brew install awscli

Configure AWS CLI

aws configure

# Example configuration
AWS Access Key ID [None]: AKIAIOSFODNN7EXAMPLE
AWS Secret Access Key [None]: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
Default region name [None]: eu-central-1
Default output format [None]: json

Terraform

You must install AWS CLI and configure it with the credentials before you use Terraform to manage AWS resources.

Install Terraform

brew tap hashicorp/tap

brew install hashicorp/tap/terraform

Provision infrastructure

To initialize a working directory that contains a Terraform configuration

terraform init

To see an execution plan that Terraform will make to your infrastructure based on the current configuration

terraform plan

Executes the actions that proposed in a Terraform plan

  terraform apply

SOPS

Encrypt secrets with SOPS to commit secrets to version control.

Install SOPS

brew install sops

.sops.yaml

cat <<EOF > ~/.sops.yaml
creation_rules:
  - kms: "arn:aws:kms:eu-central-1:111111111111:alias/management-sops"
EOF

Helm

Helm to deploy ArgoCD on EKS cluster.

Install Helm

brew install helm

Helm secret plugin

Install Helm Secrets

helm plugin install https://github.com/jkroepke/helm-secrets

Encrypt secret

helm secrets enc secrets.yaml

Decrypt secret

helm secrets view secrets.yaml

Edit encrypt secret

helm secrets edit secrets.yaml

Provision

• Create aws irsa on management account
• Deploy argocd on management eks cluster
• Create iam role on development account
• Map iam role with eks cluster role