Install Deepfactor mutating admission webhook using Argo CD

This document describes the steps needed to install Deepfactor mutating admission webhook in your Kubernetes cluster using Argo CD. This document assume that you have a Kubernetes cluster deployed using Argo CD. If you have not yet created one, please refer to the following article to create one

https://argo-cd.readthedocs.io/en/stable/

1. Install cert manager

If you have already installed cert manager in your K8s cluster, you can skip this step. Create a yaml file (cert-manager.yaml) with the following contents.

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: cert-manager
  namespace: argocd
spec:
  destination:
    namespace: cert-manager
    server: https://kubernetes.default.svc
  project: default
  source:
    chart: cert-manager
    helm:
      parameters:
      - name: installCRDs
        value: "true"
    repoURL: https://charts.jetstack.io
    targetRevision: v1.8.0
  syncPolicy:
    automated: {}
    syncOptions:
    - CreateNamespace=true

Run the following command to install

kubectl apply -f ./cert-manager.yaml

2. Install Deepfactor mutating admission webhook

Create a yaml file (df-webhook.yaml) with the following contents.

Note: The webhookconfig shown below is only an example. For guidance on how to create a webhookconfig for your environment, please refer to the following document

Configure Deepfactor Mutating Webhook

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: deepfactor-webhook
  namespace: argocd
spec:
  destination:
    namespace: df-webhook
    server: https://kubernetes.default.svc
  project: default
  source:
    chart: webhook
    helm:
      parameters:
      - name: webhook.certManager.enabled
        value: "true"
      - name: webhookconfig.dfRunToken
        value: tokenFromMyDeepfactorPortal # retrieve from Deepfactor portal UI
      - name: validation.enabled
        value: "true"
      - name: clusterName
        value: clusterNameOfYourChoice # provide a name for your cluster
    repoURL: https://static.deepfactor.io/helm-charts
    targetRevision: 
  syncPolicy:
    automated: {}
    syncOptions:
    - CreateNamespace=true

Run the following command to install Deepfactor webhook

kubectl apply -f ./df-webhook.yaml