diff options
| author | Paul Buetow <paul@buetow.org> | 2025-12-30 11:48:48 +0200 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2025-12-30 11:48:48 +0200 |
| commit | c3705dda38a51b63825855c6ba21d645eb845a7c (patch) | |
| tree | 79c645990579d23a6f8643407e7af5bd6e6eb29d /f3s | |
| parent | 5e11e592a3a54d3bc683c331eba99193727b3d40 (diff) | |
Fix ArgoCD to preserve password on helm upgrade
Remove fixed password from values.yaml so helm upgrade doesn't reset
the admin password when users change it via UI.
Changes:
- Remove argocdServerAdminPassword from values.yaml
- Leave password generation to ArgoCD default behavior
- Update Justfile install message to show get-password command
Behavior now:
- helm install: Generates random password in argocd-initial-admin-secret
- helm upgrade: Preserves existing password (does NOT reset)
- helm uninstall: Deletes secret along with all resources
- User password changes via UI are preserved
Verified:
- Password hash unchanged after helm upgrade ✅
- Secret deleted on helm uninstall ✅
- Login works before and after upgrade ✅
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Diffstat (limited to 'f3s')
| -rw-r--r-- | f3s/argocd/Justfile | 8 | ||||
| -rw-r--r-- | f3s/argocd/values.yaml | 12 |
2 files changed, 8 insertions, 12 deletions
diff --git a/f3s/argocd/Justfile b/f3s/argocd/Justfile index fc040bd..c7dab9b 100644 --- a/f3s/argocd/Justfile +++ b/f3s/argocd/Justfile @@ -17,12 +17,10 @@ install: @echo "ArgoCD deployed successfully!" @echo "Access UI at: https://argocd.f3s.buetow.org" @echo "" - @echo "Default admin credentials:" - @echo " Username: admin" - @echo " Password: argocd-admin-default" + @echo "Get initial admin password with:" + @echo " just get-password" @echo "" - @echo "NOTE: Password is fixed in values.yaml (not randomly generated)" - @echo " You can change it via UI, but helm upgrade will reset it" + @echo "NOTE: Password changes via UI are preserved on helm upgrade" upgrade: helm upgrade {{RELEASE_NAME}} argo/argo-cd --namespace {{NAMESPACE}} -f values.yaml diff --git a/f3s/argocd/values.yaml b/f3s/argocd/values.yaml index d80fe77..e3b6887 100644 --- a/f3s/argocd/values.yaml +++ b/f3s/argocd/values.yaml @@ -103,10 +103,8 @@ crds: configs: params: server.insecure: true - # Secret configuration - use fixed admin password instead of random generation - # Password will be deleted on helm uninstall, recreated on helm install - secret: - # Bcrypt hash of "argocd-admin-default" - # Generated with: htpasswd -nbBC 10 "" "argocd-admin-default" | tr -d ':\n' | sed 's/$2y/$2a/' - argocdServerAdminPassword: "$2a$10$8JvToynmoSSfC/2wYdlC7OQU6rQRcLrOONxZIegzhZeisHfvzDN52" - argocdServerAdminPasswordMtime: "2025-12-30T09:30:00Z" + # Note: argocdServerAdminPassword is NOT set (left empty) + # This means: + # - helm install: Generates random password in argocd-initial-admin-secret + # - helm upgrade: Does NOT reset the password (preserves user changes) + # - helm uninstall: Deletes secret along with all resources |