Chapter 9. Security
One of the top technology concerns, whether from the perspective of an individual developer or enterprise organization, is security. Ensuring that systems are protected in a manner that reduces compromise while communicating using secure mechanisms are just some of the steps that can be taken to increase the overall level of security in an environment. Argo CD includes a number of native capabilities that support conducting secure operations and enforces certain requirements for use when operating and interacting with the platform.
In this chapter, we will explore the different methods that can be implemented to harden the security level of Argo CD and how to communicate securely with target systems. In addition, we will also discuss how sensitive content that is used at various points within the Argo CD lifecycle can be handled to avoid being discovered by individuals and systems that should not be granted access.
Securing Argo CD
One of the key areas where security hardening can be employed in Argo CD is within the Argo CD server component, as it represents the location where the REST API and UI is exposed to end users. Considerations should be made whenever there are any externally facing resources, as there is an increased potential where attackers could gain unauthorized access to Argo CD.
The admin user gives users the ability to simplify initial setup and onboarding for Argo CD. However, this user also presents a potential risk for the misuse by an ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access