Skip to content

Commit ee62bc6

Browse files
committed
docs: update OpenShift quickstart to use argocd-agentctl JWT key instead of the insecure auto-generated one set by the ArgoCD operator
Signed-off-by: Mike Ng <[email protected]>
1 parent 94295a6 commit ee62bc6

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

docs/getting-started/openshift/index.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,14 @@ argocd-agentctl pki issue resource-proxy \
5151
--dns <dns names of principal>
5252
```
5353

54+
Create JWT signing key:
55+
56+
```
57+
argocd-agentctl jwt create-key \
58+
--principal-context <control plane context> \
59+
--upsert
60+
```
61+
5462
Deploy principal on hub cluster using argocd-operator/gitops-operator using Argo CD CR given below
5563

5664
```
@@ -66,7 +74,6 @@ spec:
6674
enabled: true
6775
allowedNamespaces:
6876
- "*"
69-
jwtAllowGenerate: true
7077
auth: "mtls:CN=([^,]+)"
7178
logLevel: "trace"
7279
image: "ghcr.io/argoproj-labs/argocd-agent/argocd-agent:latest"

0 commit comments

Comments
 (0)