Argo Rollouts
Using Argo Rollouts for progressive delivery
Abstract
Chapter 1. Argo Rollouts overview Copy linkLink copied to clipboard!
In the GitOps context, progressive delivery is a process of releasing application updates in a controlled and gradual manner. Progressive delivery reduces the risk of a release by exposing the new version of an application update only to a subset of users initially. The process involves continuously observing and analyzing this new application version to verify whether its behavior matches the requirements and expectations set. The verifications continue as the process gradually exposes the application update to a broader and wider audience.
OpenShift Container Platform provides some progressive delivery capability by using routes to split traffic between different services, but this typically requires manual intervention and management.
With Argo Rollouts, as a cluster administrator, you can automate the progressive deployment delivery and manage the progressive deployment of applications hosted on Kubernetes and OpenShift Container Platform clusters. Argo Rollouts is a controller with custom resource definitions (CRDs) that provides advanced deployment capabilities such as blue-green, canary, canary analysis, and experimentation.
1.1. Why use Argo Rollouts? Copy linkLink copied to clipboard!
As a cluster administrator, managing and coordinating advanced deployment strategies in traditional infrastructure often involves long maintenance windows. Automation with tools like OpenShift Container Platform and Red Hat OpenShift GitOps can reduce these windows, but setting up these strategies can still be challenging.
Use Argo Rollouts to simplify progressive delivery by allowing application teams to define their rollout strategy declaratively. Teams no longer need to define multiple deployments and services or create automation for traffic shaping and integration of tests.
You can use Argo Rollouts for the following reasons:
- Your users can more easily adopt progressive delivery in end-user environments.
- With the available structure and guidelines of Argo Rollouts, your teams do not have to learn about traffic managers and complex infrastructure.
- During an update, depending on your deployment strategy, you can optimize the existing traffic-shaping abilities of the deployed application versions by gradually shifting traffic to the new version.
- You can combine Argo Rollouts with a metric provider like Prometheus to do metric-based and policy-driven rollouts and rollbacks based on the parameters set.
- Your end-user environments get the Red Hat OpenShift GitOps Operator’s security and help to manage the resources, cost, and time effectively.
- Your existing users who use Argo CD with security and automated deployments get feedback early in the process that they can use to avoid problems that impact them.
1.1.1. Benefits of Argo Rollouts Copy linkLink copied to clipboard!
Using Argo Rollouts as a default workload in Red Hat OpenShift GitOps provides the following benefits:
- Automated progressive delivery as part of the GitOps workflow
- Advanced deployment capabilities
- Optimize the existing advanced deployment strategies such as blue-green or canary
- Zero downtime updates for deployments
- Fine-grained, weighted traffic shifting
- Able to test without any new traffic hitting the production environment
- Automated rollbacks and promotions
- Manual judgment
- Customizable metric queries and analysis of business key performance indicators (KPIs)
- Integration with ingress controller and Red Hat OpenShift Service Mesh for advanced traffic routing
- Integration with metric providers for deployment strategy analysis
- Usage of multiple providers
1.2. About RolloutManager custom resources and specification Copy linkLink copied to clipboard!
To use Argo Rollouts, you must install Red Hat OpenShift GitOps Operator on the cluster, and then create and submit a RolloutManager custom resource (CR) to the Operator in the namespace of your choice. You can scope the RolloutManager CR for single or multiple namespaces. The Operator creates an argo-rollouts instance with the following namespace-scoped supporting resources:
- Argo Rollouts controller
- Argo Rollouts metrics service
- Argo Rollouts service account
- Argo Rollouts roles
- Argo Rollouts role bindings
- Argo Rollouts secret
You can specify the command arguments, environment variables, a custom image name, and so on for the Argo Rollouts controller resource in the spec of the RolloutsManager CR. The RolloutManager CR spec defines the desired state of Argo Rollouts.
Example: RolloutManager CR
1.2.1. Argo Rollouts controller Copy linkLink copied to clipboard!
With the Argo Rollouts controller resource, you can manage the progressive application delivery in your namespace. The Argo Rollouts controller resource monitors the cluster for events, and reacts whenever there is a change in any resource related to Argo Rollouts. The controller reads all the rollout details and brings the cluster to the same state as described in the rollout definition.
1.3. Argo Rollouts architecture overview Copy linkLink copied to clipboard!
Argo Rollouts support is enabled on a cluster by installing the Red Hat OpenShift GitOps Operator and configuring a RolloutManager custom resource (CR) instance.
After a RolloutManager CR is created, the Red Hat OpenShift GitOps Operator installs Argo Rollouts into that same namespace. This step includes the installation of the Argo Rollouts controller and the resources required for handling Argo Rollouts, such as CRs, roles, role bindings, and configuration data.
The Argo Rollouts controller can be installed in two different modes:
- Cluster-scoped mode (default): The controller oversees resources throughout all namespaces within the cluster.
- Namespace-scoped mode: The controller monitors resources within the namespace where Argo Rollouts is deployed.
The architecture of Argo Rollouts is structured into components and resources. Components are used to manage resources. For example, the AnalysisRun controller manages the AnalysisRun CR.
Argo Rollouts include several mechanisms to gather analysis metrics to verify that a new application version is deployed:
-
Prometheus metrics: The
AnalysisTemplateCR is configured to connect to Prometheus instances to evaluate the success or failure of one or more metrics. -
Kubernetes job metrics: Argo Rollouts support the Kubernetes
Jobresource to run analysis on resource metrics. You can verify a successful deployment of an application based on the successful run of Kubernetes jobs.
1.3.1. Argo Rollouts components Copy linkLink copied to clipboard!
Argo Rollouts consists of several components that enable users to practice progressive delivery in OpenShift Container Platform.
| Name | Description |
|---|---|
| Argo Rollouts controller |
The Argo Rollouts Controller is an alternative to the standard |
| AnalysisRun controller |
The AnalysisRun controller manages and performs analysis for |
|
|
The |
|
|
The Service controller manages the |
| Argo Rollouts CLI and UI |
Argo Rollouts supports an |
1.3.2. Argo Rollouts resources Copy linkLink copied to clipboard!
Argo Rollout components manage several resources to enable progressive delivery:
-
Rollouts-specific resources: For example,
Rollout,AnalysisRun, orExperiment. -
Kubernetes networking resources: For example,
Service,Ingress, orRoutefor network traffic shaping. Argo Rollouts integrate with these resources, which are referred to as traffic management.
These resources are essential for customizing the deployment of applications through the Rollout CR.
Argo Rollouts support the following actions:
- Route percentage-based traffic for canary deployments.
-
Forward incoming user traffic by using
ServiceandIngressresources to the correct application version. - Use multiple mechanisms to collect analysis metrics to validate the deployment of a new version of an application.
| Name | Description |
|---|---|
|
|
This CR enables the deployment of applications by using canary or blue-green deployment strategies. It replaces the in-built Kubernetes |
|
|
This CR is used to perform an analysis and aggregate the results of analysis to guide the user toward the successful deployment delivery of an application. The |
|
|
The |
|
|
The |
|
| Argo Rollouts natively support routing traffic by services and ingresses by using the Service and Ingress controllers. |
|
|
The OpenShift |
1.4. Argo Rollouts CLI overview Copy linkLink copied to clipboard!
You can use the Argo Rollouts CLI, which is an optional plugin, to manage and monitor Argo Rollouts resources directly, bypassing the need to use the OpenShift Container Platform web console or the CLI (oc).
With the Argo Rollouts CLI plugin, you can perform the following actions:
- Make changes to an Argo Rollouts image.
- Monitor the progress of an Argo Rollouts promotion.
- Proceed with the promotion steps in a canary deployment.
- Terminate a failed Argo Rollouts deployment.
The Argo Rollouts CLI plugin directly integrates with oc and kubectl commands.
Chapter 2. Using Argo Rollouts for progressive deployment delivery Copy linkLink copied to clipboard!
To use Argo Rollouts and manage progressive delivery, after you install the Red Hat OpenShift GitOps Operator on the cluster, you can create and configure a RolloutManager custom resource (CR) instance in the namespace of your choice. You can scope the RolloutManager CR for single or multiple namespaces.
2.1. Prerequisites Copy linkLink copied to clipboard!
-
You have access to the cluster with
cluster-adminprivileges. - You have access to the OpenShift Container Platform web console.
- Red Hat OpenShift GitOps 1.9.0 or a newer version is installed on your cluster.
2.2. Creating a RolloutManager custom resource Copy linkLink copied to clipboard!
To manage progressive delivery of deployments by using Argo Rollouts in Red Hat OpenShift GitOps, you must create and configure a RolloutManager custom resource (CR) in the namespace of your choice. By default, any new argo-rollouts instance has permission to manage resources only in the namespace where it is deployed, but you can use Argo Rollouts in multiple namespaces as required.
Prerequisites
- Red Hat OpenShift GitOps 1.9.0 or a newer version is installed on your cluster.
Procedure
- Log in to the OpenShift Container Platform web console as a cluster administrator.
- In the Administrator perspective, click Operators → Installed Operators.
-
Create or select the project where you want to create and configure a
RolloutManagercustom resource (CR) from the Project drop-down menu. - Select Red Hat OpenShift GitOps from the installed operators.
- In the Details tab, under the Provided APIs section, click Create instance in the RolloutManager pane.
On the Create RolloutManager page, select the YAML view and use the default YAML or edit it according to your requirements:
Example:
RolloutManagerCRCopy to Clipboard Copied! Toggle word wrap Toggle overflow - Click Create.
- In the RolloutManager tab, under the RolloutManagers section, verify that the Status field of the RolloutManager instance shows as Phase: Available.
In the left navigation pane, verify the creation of the namespace-scoped supporting resources:
-
Click Workloads → Deployments to verify that the
argo-rolloutsdeployment is available with the Status showing as1 of 1 podsrunning. -
Click Workloads → Secrets to verify that the
argo-rollouts-notification-secretsecret is available. -
Click Networking → Services to verify that the
argo-rollouts-metricsservice is available. -
Click User Management → Roles to verify that the
argo-rolloutsrole andargo-rollouts-aggregate-to-admin,argo-rollouts-aggregate-to-edit, andargo-rollouts-aggregate-to-viewcluster roles are available. -
Click User Management → RoleBindings to verify that the
argo-rolloutsrole binding is available.
-
Click Workloads → Deployments to verify that the
2.3. Deleting a RolloutManager custom resource Copy linkLink copied to clipboard!
Uninstalling the Red Hat OpenShift GitOps Operator does not remove the resources that were created during installation. You must manually delete the RolloutManager custom resource (CR) before you uninstall the Red Hat OpenShift GitOps Operator.
Prerequisites
- Red Hat OpenShift GitOps 1.9.0 or a newer version is installed on your cluster.
-
A
RolloutManagerCR exists in your namespace.
Procedure
- Log in to the OpenShift Container Platform web console as a cluster administrator.
- In the Administrator perspective, click Operators → Installed Operators.
-
Click the Project drop-down menu and select the project that contains the
RolloutManagerCR. - Select Red Hat OpenShift GitOps from the installed operators.
- Click the RolloutManager tab to find RolloutManager instances under the RolloutManagers section.
- Click the instance.
- Click Actions → Delete RolloutManager from the drop-down menu, and click Delete to confirm in the dialog box.
- In the RolloutManager tab, under the RolloutManagers section, verify that the RolloutManager instance is not available anymore.
In the left navigation pane, verify the deletion of the namespace-scoped supporting resources:
-
Click Workloads → Deployments to verify that the
argo-rolloutsdeployment is deleted. -
Click Workloads → Secrets to verify that the
argo-rollouts-notification-secretsecret is deleted. -
Click Networking → Services to verify that the
argo-rollouts-metricsservice is deleted. -
Click User Management → Roles to verify that the
argo-rolloutsrole andargo-rollouts-aggregate-to-admin,argo-rollouts-aggregate-to-edit, andargo-rollouts-aggregate-to-viewcluster roles are deleted. -
Click User Management → RoleBindings to verify that the
argo-rolloutsrole binding is deleted.
-
Click Workloads → Deployments to verify that the
2.4. Installing Argo Rollouts CLI on Linux Copy linkLink copied to clipboard!
You can install the Argo Rollouts CLI on Linux.
Prerequisites
-
You have installed the OpenShift Container Platform CLI (
oc).
Procedure
Download the latest version of the Argo Rollouts CLI binary,
kubectl-argo-rollouts, by running the following command:curl -LO https://github.com/argoproj/argo-rollouts/releases/latest/download/kubectl-argo-rollouts-linux-amd64
$ curl -LO https://github.com/argoproj/argo-rollouts/releases/latest/download/kubectl-argo-rollouts-linux-amd64Copy to Clipboard Copied! Toggle word wrap Toggle overflow Ensure that the
kubectl-argo-rolloutsbinary is executable by running the following command:chmod +x ./kubectl-argo-rollouts-linux-amd64
$ chmod +x ./kubectl-argo-rollouts-linux-amd64Copy to Clipboard Copied! Toggle word wrap Toggle overflow Move the
kubectl-argo-rolloutsbinary to the system path by running the following command:mv ./kubectl-argo-rollouts-linux-amd64 /usr/local/bin/kubectl-argo-rollouts
# mv ./kubectl-argo-rollouts-linux-amd64 /usr/local/bin/kubectl-argo-rolloutsCopy to Clipboard Copied! Toggle word wrap Toggle overflow ImportantEnsure that you have superuser privileges to run this command.
Verify that the plugin is installed correctly by running the following command and receiving the similar output:
oc argo rollouts version
$ oc argo rollouts versionCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
2.5. Installing Argo Rollouts CLI on Mac OS Copy linkLink copied to clipboard!
If you are a macOS user, you can install the Argo Rollouts CLI by using the Homebrew package manager.
Prerequisites
-
You have installed the Homebrew (
brew) package manager.
Procedure
Run the following command to install the Argo Rollouts CLI:
brew install argoproj/tap/kubectl-argo-rollouts
$ brew install argoproj/tap/kubectl-argo-rolloutsCopy to Clipboard Copied! Toggle word wrap Toggle overflow
2.6. Enabling Argo Rollouts UI on an Argo CD instance Copy linkLink copied to clipboard!
To enable Argo Rollouts UI on an Argo CD instance, complete the following steps.
Prerequisites
-
You have access to the cluster with
cluster-adminprivileges. - You have installed the Red Hat OpenShift GitOps Operator on your OpenShift Container Platform cluster.
-
You have configured the
RolloutManagercustom resource (CR).
Procedure
- Log in to the OpenShift Container Platform web console.
- In the Administrator perspective of the web console, click Operators → Installed Operators.
- Select Red Hat OpenShift GitOps from the installed Operators list and click the Argo CD tab.
-
Select the Argo CD instance in the Argo CD tab under the
openshift-gitopsnamespace. Click YAML and add the following configuration to configure the Argo Rollouts UI:
Example enabling Argo Rollouts UI in the Argo CD CR
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Set this value to
trueto configure theenableRolloutsUIfield.
- Click Save.
-
In the Administrator perspective of the web console, go to the
menu and click OpenShift GitOps → Cluster Argo CD. The login page of the Argo CD Web UI is displayed in a new window.
To access the Argo Rollouts UI in the Argo CD Web UI, configure a sample application that includes the Argo Rollouts resources.
NoteThe
enableRolloutsUIfield restarts the Argo CD server deployment pod. Therefore, it takes a few seconds for the Argo Rollouts extension to enable in the Argo CD Web UI.
Chapter 3. Getting started with Argo Rollouts Copy linkLink copied to clipboard!
Argo Rollouts supports canary and blue-green deployment strategies. This guide provides instructions with examples using a canary deployment strategy to help you deploy, update, promote and manually abort rollouts.
With a canary-based deployment strategy, you split traffic between two application versions:
- Canary version: A new version of an application where you gradually route the traffic.
- Stable version: The current version of an application. After the canary version is stable and has all the user traffic directed to it, it becomes the new stable version. The previous stable version is discarded.
3.1. Prerequisites Copy linkLink copied to clipboard!
- You have logged in to the OpenShift Container Platform cluster as an administrator.
- You have access to the OpenShift Container Platform web console.
- You have installed Red Hat OpenShift GitOps on your OpenShift Container Platform cluster.
- You have installed Argo Rollouts on your OpenShift Container Platform cluster.
- You have installed the Argo Rollouts CLI on your system.
3.2. Deploying a rollout Copy linkLink copied to clipboard!
As a cluster administrator, you can configure Argo Rollouts to progressively route a subset of user traffic to a new application version. Then you can test whether the application is deployed and working.
The following example procedure creates a rollouts-demo rollout and service. The rollout then routes 20% of traffic to a canary version of the application, waits for a manual promotion, and then performs multiple automated promotions until it routes the entire traffic to the new application version.
Procedure
- In the Administrator perspective of the web console, click Operators → Installed Operators → Red Hat OpenShift GitOps → Rollout.
-
Create or select the project in which you want to create and configure a
Rolloutcustom resource (CR) from the Project drop-down menu. Click Create Rollout and enter the following configuration in the YAML view:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- The deployment strategy that the rollout must use.
- 2
- Specify the steps for the rollout. This example gradually routes 20%, 40%, 60%, and 80% of traffic to the canary version.
- 3
- The percentage of traffic that must be directed to the canary version. A value of 20 means that 20% of traffic is directed to the canary version.
- 4
- Specify to the Argo Rollouts controller to pause indefinitely until it finds a request for promotion.
- 5
- Specify to the Argo Rollouts controller to pause for a duration of 45 seconds. You can set the duration value in seconds (
s), minutes (m), or hours (h). For example, you can specify1hfor an hour. If no value is specified, the duration value defaults to seconds. - 6
- Specifies the pods that are to be created.
Click Create.
NoteTo ensure that the rollout becomes available quickly on creation, the Argo Rollouts controller automatically treats the
argoproj/rollouts-demo:blueinitial container image specified in the.spec.template.spec.containers.imagefield as a stable version. In the initial instance, the creation of theRolloutresource routes all of the traffic towards the stable version of the application and skips the part where the traffic is sent to the canary version. However, for all subsequent application upgrades with the modifications to the.spec.template.spec.containers.imagefield, the Argo Rollouts controller performs the canary steps, as usual.Verify that your rollout was created correctly by running the following command:
oc argo rollouts list rollouts -n <namespace>
$ oc argo rollouts list rollouts -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Example output
NAME STRATEGY STATUS STEP SET-WEIGHT READY DESIRED UP-TO-DATE AVAILABLE rollouts-demo Canary Healthy 8/8 100 5/5 5 5 5
NAME STRATEGY STATUS STEP SET-WEIGHT READY DESIRED UP-TO-DATE AVAILABLE rollouts-demo Canary Healthy 8/8 100 5/5 5 5 5Copy to Clipboard Copied! Toggle word wrap Toggle overflow Create the Kubernetes services that targets the
rollouts-demorollout.- In the Administrator perspective of the web console, click Networking → Services.
Click Create Service and enter the following configuration in the YAML view:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Click Create.
Rollouts automatically update the created service with pod template hash of the canary
ReplicaSet. For example,rollouts-pod-template-hash: 687d76d795.
Watch the progression of your rollout by running the following command:
oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow After the rollout has been created, you can verify that the Status field of the rollout shows Phase: Healthy.
In the Rollout tab, under the Rollouts section, verify that the Status field of the
rollouts-demorollout shows as Phase: Healthy.TipAlternatively, you can verify that the rollout is healthy by running the following command:
oc argo rollouts status rollouts-demo -n <namespace>
$ oc argo rollouts status rollouts-demo -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Example output
Healthy
HealthyCopy to Clipboard Copied! Toggle word wrap Toggle overflow
You are now ready to perform a canary deployment, with the next update of the Rollout CR.
3.3. Updating the rollout Copy linkLink copied to clipboard!
When you update the Rollout custom resource (CR) with modifications to the .spec.template.spec fields, for example, the container image version, then new pods are created through the ReplicaSet by using the updated container image version.
Procedure
Simulate the new canary version of the application by modifying the container image deployed in the rollout.
- In the Administrator perspective of the web console, go to Operators → Installed Operators → Red Hat OpenShift GitOps → Rollout.
-
Select the existing
rollouts-demorollout and modify the.spec.template.spec.containers.imagevalue fromargoproj/rollouts-demo:bluetoargoproj/rollouts-demo:yellowin the YAML view. Click Save and then click Reload.
The container image deployed in the rollout is modified and the rollout initiates a new canary deployment.
NoteAs per the
setWeightproperty defined in the.spec.strategy.canary.stepsfield of theRolloutCR, initially 20% of traffic to the route reaches the canary version and the rollout is paused indefinitely until a request for promotion is received.Example route with 20% of traffic directed to the canary version and rollout is paused indefinitely until a request for promotion is specified in the subsequent step
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- The deployment strategy that the rollout must use.
- 2
- The steps for the rollout. This example gradually routes 20%, 40%, 60%, and 80% of traffic to the canary version.
- 3
- The percentage of traffic that must be directed to the canary version. A value of 20 means that 20% of traffic is directed to the canary version.
- 4
- Specification to the Argo Rollouts controller to pause indefinitely until it finds a request for promotion.
Watch the progression of your rollout by running the following command:
oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
RolloutCR is defined.
Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow The rollout is now in a paused status, because there is no pause duration specified in the rollout’s update strategy configuration.
Repeat the previous step to test the newly deployed version of application and ensure that it is working as expected. For example, verify the application by interacting with the application through the browser and try running tests or observing container logs.
The rollout will remain paused until you advance it to the next step.
After you verify that the new version of the application is working as expected, you can decide whether to continue with promotion or to abort the rollout. Accordingly, follow the instructions in "Promoting the rollout" or "Manually aborting the rollout".
3.4. Promoting the rollout Copy linkLink copied to clipboard!
Because your rollout is now in a paused status, as a cluster administrator, you must now manually promote the rollout to allow it to progress to the next step.
Procedure
Simulate another new canary version of the application by running the following command in the Argo Rollouts CLI:
oc argo rollouts promote rollouts-demo -n <namespace>
$ oc argo rollouts promote rollouts-demo -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Example output
rollout 'rollouts-demo' promoted
rollout 'rollouts-demo' promotedCopy to Clipboard Copied! Toggle word wrap Toggle overflow This increases the traffic weight to 40% in the canary version.
Verify that the rollout progresses through the rest of the steps, by running the following command:
oc argo rollouts get rollout rollouts-demo -n <namespace> --watch
$ oc argo rollouts get rollout rollouts-demo -n <namespace> --watch1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Because the rest of the steps as defined in the
RolloutCR have set durations, for example,pause: {duration: 45}, the Argo Rollouts controller waits that duration and then automatically moves to the next step.After all steps are completed successfully, the new
ReplicaSetobject is marked as the stable replica set.Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
3.5. Manually aborting the rollout Copy linkLink copied to clipboard!
When using a canary deployment, the rollout deploys an initial canary version of the application. You can verify it either manually or programmatically. After you verify the canary version and promote it to stable, the new stable version is made available to all users.
However, sometimes bugs, errors, or deployment issues are discovered in the canary version, and you might want to abort the canary rollout and rollback to a stable version of your application.
Aborting a canary rollout deletes the resources of the new canary version and restores the previous stable version of your application. All network traffic such as ingress, route, or virtual service that was being directed to the canary returns to the original stable version.
The following example procedure deploys a new red canary version of your application, and then aborts it before it is fully promoted to stable.
Procedure
Update the container image version and and modify the
.spec.template.spec.containers.imagevalue fromargoproj/rollouts-demo:yellowtoargoproj/rollouts-demo:redby running the following command in the Argo Rollouts CLI:oc argo rollouts set image rollouts-demo rollouts-demo=argoproj/rollouts-demo:red -n <namespace>
$ oc argo rollouts set image rollouts-demo rollouts-demo=argoproj/rollouts-demo:red -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutcustom resource (CR) is defined.
Example output
rollout "rollouts-demo" image updated
rollout "rollouts-demo" image updatedCopy to Clipboard Copied! Toggle word wrap Toggle overflow The container image deployed in the rollout is modified and the rollout initiates a new canary deployment.
- Wait for the rollout to reach the paused status.
Verify that the rollout deploys the
rollouts-demo:redcanary version and reaches the paused status by running the following command:oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
RolloutCR is defined.
Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Abort the update of the rollout by running the following command:
oc argo rollouts abort rollouts-demo -n <namespace>
$ oc argo rollouts abort rollouts-demo -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
RolloutCR is defined.
Example output
rollout 'rollouts-demo' aborted
rollout 'rollouts-demo' abortedCopy to Clipboard Copied! Toggle word wrap Toggle overflow The Argo Rollouts controller deletes the canary resources of the application, and rolls back to the stable version.
Verify that after aborting the rollout, now the canary
ReplicaSetis scaled to 0 replicas by running the following command:oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
RolloutCR is defined.
Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow The rollout status is marked as
Degradedindicating that even though the application has rolled back to the previous stable version,yellow, the rollout is not currently at the wanted version,red, that was set within the.spec.template.spec.containers.imagefield.NoteThe
Degradedstatus does not reflect the health of the application. It only indicates that there is a mismatch between the wanted and running container image versions.Update the container image version to the previous stable version,
yellow, and modify the.spec.template.spec.containers.imagevalue by running the following command:oc argo rollouts set image rollouts-demo rollouts-demo=argoproj/rollouts-demo:yellow -n <namespace>
$ oc argo rollouts set image rollouts-demo rollouts-demo=argoproj/rollouts-demo:yellow -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
RolloutCR is defined.
Example output
rollout "rollouts-demo" image updated
rollout "rollouts-demo" image updatedCopy to Clipboard Copied! Toggle word wrap Toggle overflow The rollout skips the analysis and promotion steps, rolls back to the previous stable version,
yellow, and fast-tracks the deployment of the stableReplicaSet.Verify that the rollout status is immediately marked as
Healthyby running the following command:oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
RolloutCR is defined.
Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Chapter 4. Routing traffic by using Argo Rollouts Copy linkLink copied to clipboard!
You can progressively route a subset of user traffic to a new application version by using Argo Rollouts and its traffic-splitting mechanisms. Then you can test whether the application is deployed and working.
With Openshift Routes, you can configure Argo Rollouts to reduce or increase the amount of traffic by directing it to various applications in a cluster environment based on your requirements.
You can use OpenShift Routes to split traffic between two application versions:
- Canary version: A new version of an application where you gradually route the traffic.
- Stable version: The current version of an application. After the canary version is stable and has all the user traffic directed to it, it becomes the new stable version. The previous stable version is discarded.
4.1. Prerequisites Copy linkLink copied to clipboard!
- You have logged in to the OpenShift Container Platform cluster as an administrator.
- You have installed Red Hat OpenShift GitOps on your OpenShift Container Platform cluster.
- You have installed Argo Rollouts on your OpenShift Container Platform cluster.
- You have installed the Red Hat OpenShift GitOps CLI on your system.
- You have installed the Argo Rollouts CLI on your system.
4.2. Configuring Argo Rollouts to route traffic by using OpenShift Routes Copy linkLink copied to clipboard!
You can use OpenShift Routes to configure Argo Rollouts to create routes, rollouts, and services.
The following example procedure creates a route, a rollout, and two services. It then gradually routes an increasing percentage of traffic to a canary version of the application before that canary state is marked as successful and becomes the new stable version.
Prerequisites
- You have logged in to the OpenShift Container Platform cluster as an administrator.
- You have installed the Red Hat OpenShift GitOps on your OpenShift Container Platform cluster.
- You have installed Argo Rollouts on your OpenShift Container Platform cluster. For more information, see "Creating a RolloutManager custom resource".
- You have installed the Red Hat OpenShift GitOps CLI on your system. For more information, see "Installing the GitOps CLI".
- You have installed the Argo Rollouts CLI on your system. For more information, see "Argo Rollouts CLI overview".
Procedure
Create a
Routeobject.- In the Administrator perspective of the web console, click Networking → Routes.
- Click Create Route.
On the Create Route page, click YAML view and add the following snippet: The following example creates a route called
rollouts-demo-route:Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specifies the name of the port used by the application for running inside the container.
- 2
- Specifies the TLS configuration used to secure the route.
- 3
- The name of the targeted stable service.
- 4
- This field is automatically modified to stable weight by Route Rollout plugin.
- 5
- The name of the targeted canary service.
- 6
- This field is automatically modified to canary weight by Route Rollout plugin.
- Click Create to create the route. It is then displayed on the Routes page.
Create the services, canary and stable, to be referenced in the route.
- In the Administrator perspective of the web console, click Networking → Services.
- Click Create Service.
On the Create Service page, click YAML view and add the following snippet: The following example creates a canary service called
argo-rollouts-canary-service. Canary traffic is directed to this service.Copy to Clipboard Copied! Toggle word wrap Toggle overflow ImportantEnsure that the name of the canary service specified in the
Routeobject matches with the name of the canary service specified in theServiceobject.Click Create to create the canary service.
Rollouts automatically update the created service with pod template hash of the canary
ReplicaSet. For example,rollouts-pod-template-hash: 7bf84f9696.Repeat these steps to create the stable service: The following example creates a stable service called
argo-rollouts-stable-service. Stable traffic is directed to this service.Copy to Clipboard Copied! Toggle word wrap Toggle overflow ImportantEnsure that the name of the stable service specified in the
Routeobject matches with the name of the stable service specified in theServiceobject.Click Create to create the stable service.
Rollouts automatically update the created service with pod template hash of the stable
ReplicaSet. For example,rollouts-pod-template-hash: 1b6a7733.
Create the
RolloutCR to reference theRouteandServiceobjects.- In the Administrator perspective of the web console, go to Operators → Installed Operators → Red Hat OpenShift GitOps → Rollout.
On the Create Rollout page, click YAML view and add the following snippet: The following example creates a
RolloutCR calledrollouts-demo:Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specifies the pods that are to be created.
- 2
- This value must match the name of the created canary
Service. - 3
- This value must match the name of the created stable
Service. - 4
- This value must match the name of the created
RouteCR. - 5
- Specify the steps for the rollout. This example gradually routes 30%, 60%, and 100% of traffic to the canary version.
- 6
- Ensure that the contents of the
selectorfield are the same as in canary and stable service.
- Click Create.
- In the Rollout tab, under the Rollout section, verify that the Status field of the rollout shows Phase: Healthy.
Verify that the route is directing 100% of the traffic towards the stable version of the application.
NoteWhen the first instance of the
Rolloutresource is created, the rollout regulates the amount of traffic to be directed towards the stable and canary application versions. In the initial instance, the creation of theRolloutresource routes all of the traffic towards the stable version of the application and skips the part where the traffic is sent to the canary version.-
Go to Networking → Routes and look for the
Routeresource you want to verify. Select the YAML tab and view the following snippet:
Example:
RouteCopy to Clipboard Copied! Toggle word wrap Toggle overflow
-
Go to Networking → Routes and look for the
Simulate the new canary version of the application by modifying the container image deployed in the rollout.
- In the Administrator perspective of the web console, go to Operators → Installed Operators → Red Hat OpenShift GitOps → Rollout.
Select the existing Rollout and modify the
.spec.template.spec.containers.imagevalue fromargoproj/rollouts-demo:bluetoargoproj/rollouts-demo:yellow.As a result, the container image deployed in the rollout is modified and the rollout initiates a new canary deployment.
NoteAs per the
setWeightproperty defined in the.spec.strategy.canary.stepsfield of theRolloutresource, initially 30% of traffic to the route reaches the canary version and 70% of traffic is directed towards the stable version. The rollout is paused after 30% of traffic is directed to the canary version.Example route with 30% of traffic directed to the canary version and 70% directed to the stable version.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Simulate another new canary version of the application by running the following command in the Argo Rollouts CLI:
oc argo rollouts promote rollouts-demo -n <namespace>
$ oc argo rollouts promote rollouts-demo -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
This increases the traffic weight to 60% in the canary version and 40% in the stable version.
Example route with 60% of traffic directed to the canary version and 40% directed to the stable version.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Increase the traffic weight in the canary version to 100% and discard the traffic in the old stable version of the application by running the following command:
oc argo rollouts promote rollouts-demo -n <namespace>
$ oc argo rollouts promote rollouts-demo -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Example route with 0% of traffic directed to the canary version and 100% directed to the stable version.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Chapter 5. Routing traffic by using Argo Rollouts for OpenShift Service Mesh Copy linkLink copied to clipboard!
Argo Rollouts in Red Hat OpenShift GitOps support various traffic management mechanisms such as OpenShift Routes and Istio-based OpenShift Service Mesh.
The choice for selecting a traffic manager to be used with Argo Rollouts depends on the existing traffic management solution that you are using to deploy cluster workloads. For example, Red Hat OpenShift Routes provides basic traffic management functionality and does not require the use of a sidecar container. However, Red Hat OpenShift Service Mesh provides more advanced routing capabilities by using Istio but does require the configuration of a sidecar container.
You can use OpenShift Service Mesh to split traffic between two application versions.
- Canary version: A new version of an application where you gradually route the traffic.
- Stable version: The current version of an application. After the canary version is stable and has all the user traffic directed to it, it becomes the new stable version. The previous stable version is discarded.
The Istio-support within Argo Rollouts uses the Gateway and VirtualService resources to handle traffic routing.
- Gateway: You can use a Gateway to manage inbound and outbound traffic for your mesh. The gateway is the entry point of OpenShift Service Mesh and handles traffic requests sent to an application.
- VirtualService: VirtualService defines traffic routing rules and the percentage of traffic that goes to underlying services, such as the stable and canary services.
Sample deployment scenario
For example, in a sample deployment scenario, 100% of the traffic is directed towards the stable version of the application during the initial instance. The application is running as expected, and no additional attempts are made to deploy a new version.
However, after deploying a new version of the application, Argo Rollouts creates a new canary deployment based on the new version of the application and routes some percentage of traffic to that new version.
When you use Service Mesh, Argo Rollouts automatically modifies the VirtualService resource to control the traffic split percentage between the stable and canary application versions. In the following diagram, 20% of traffic is sent to the canary application version after the first promotion and then 80% is sent to the stable version by the stable service.
5.1. Configuring Argo Rollouts to route traffic by using OpenShift Service Mesh Copy linkLink copied to clipboard!
You can use OpenShift Service Mesh to configure Argo Rollouts by creating the following items:
- A gateway
- Two Kubernetes services: stable and canary, which point to the pods within each version of the services
- A VirtualService
- A rollout custom resource (CR)
In the following example procedure, the rollout routes 20% of traffic to a canary version of the application. After a manual promotion, the rollout routes 40% of traffic. After another manual promotion, the rollout performs multiple automated promotions until all traffic is routed to the new application version.
Prerequisites
- You are logged in to the OpenShift Container Platform cluster as an administrator.
- You installed Red Hat OpenShift GitOps on your OpenShift Container Platform cluster.
- You installed Argo Rollouts on your OpenShift Container Platform cluster.
- You installed the Argo Rollouts CLI on your system.
- You installed the OpenShift Service Mesh operator on the cluster and configured the ServiceMeshControlPlane.
Procedure
Create a
Gatewayobject to accept the inbound traffic for your mesh.Create a YAML file with the following snippet content.
Example gateway called
rollouts-demo-gatewayCopy to Clipboard Copied! Toggle word wrap Toggle overflow Apply the YAML file by running the following command.
oc apply -f gateway.yaml
$ oc apply -f gateway.yamlCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Create the services for the canary and stable versions of the application.
- In the Administrator perspective of the web console, go to Networking → Services.
- Click Create Service.
On the Create Service page, click YAML view and add the following snippet. The following example creates a stable service called
rollouts-demo-stable. Stable traffic is directed to this service.Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Click Create to create a stable service.
On the Create Service page, click YAML view and add the following snippet. The following example creates a canary service called
rollouts-demo-canary. Canary traffic is directed to this service.Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Click Create to create the canary service.
Create a VirtualService to route incoming traffic to stable and canary services.
Create a YAML file, and copy the following YAML into it. The following example creates a
VirtualServicecalledrollouts-demo-vsvc:Copy to Clipboard Copied! Toggle word wrap Toggle overflow Apply the YAML file by running the following command.
oc apply -f virtual-service.yaml
$ oc apply -f virtual-service.yamlCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Create the
RolloutCR. In this example,Istiois used as a traffic manager.- In the Administrator perspective of the web console, go to Operators → Installed Operators → Red Hat OpenShift GitOps → Rollout.
On the Create Rollout page, click YAML view and add the following snippet. The following example creates a
RolloutCR calledrollouts-demo:Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- This value must match the name of the created canary
Service. - 2
- This value must match the name of the created stable
Service. - 3
- Specify the steps for the rollout. This example gradually routes 20%, 40%, 60%, and 100% of traffic to the canary version.
- 4
- Ensure that the contents of the
selectorfield are the same as in canary and stable service.
- Click Create.
- In the Rollout tab, under the Rollout section, verify that the Status field of the rollout shows Phase: Healthy.
Verify that the route is directing 100% of the traffic towards the stable version of the application.
Watch the progression of your rollout by running the following command:
oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow NoteWhen the first instance of the
Rolloutresource is created, the rollout regulates the amount of traffic to be directed towards the stable and canary application versions. In the initial instance, the creation of theRolloutresource routes all of the traffic towards the stable version of the application and skips the part where the traffic is sent to the canary version.To verify that the service mesh sends 100% of the traffic for the stable service and 0% for the canary service, run the following command:
oc describe virtualservice/rollouts-demo-vsvc -n <namespace>
$ oc describe virtualservice/rollouts-demo-vsvc -n <namespace>Copy to Clipboard Copied! Toggle word wrap Toggle overflow View the following output displayed in the terminal:
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Simulate the new canary version of the application by modifying the container image deployed in the rollout.
Modify the
.spec.template.spec.containers.imagevalue fromargoproj/rollouts-demo:bluetoargoproj/rollouts-demo:yellow, by running the following command.oc argo rollouts set image rollouts-demo rollouts-demo=argoproj/rollouts-demo:yellow -n <namespace>
$ oc argo rollouts set image rollouts-demo rollouts-demo=argoproj/rollouts-demo:yellow -n <namespace>Copy to Clipboard Copied! Toggle word wrap Toggle overflow As a result, the container image deployed in the rollout is modified and the rollout initiates a new canary deployment.
NoteAs per the
setWeightproperty defined in the.spec.strategy.canary.stepsfield of theRolloutresource, initially 20% of traffic to the route reaches the canary version and 80% of traffic is directed towards the stable version. The rollout is paused after 20% of traffic is directed to the canary version.Watch the progression of your rollout by running the following command.
oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
In the following example, 80% of traffic is routed to the stable service and 20% of traffic is routed to the canary service. The deployment is then paused indefinitely until you manually promote it to the next level.
Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Example with 80% directed to the stable version and 20% of traffic directed to the canary version.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Manually promote the deployment to the next promotion step.
oc argo rollouts promote rollouts-demo -n <namespace>
$ oc argo rollouts promote rollouts-demo -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Watch the progression of your rollout by running the following command:
oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
In the following example, 60% of traffic is routed to the stable service and 40% of traffic is routed to the canary service. The deployment is then paused indefinitely until you manually promote it to the next level.
Example output
Copy to Clipboard Copied! Toggle word wrap Toggle overflow Example of 60% traffic directed to the stable version and 40% directed to the canary version.
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Increase the traffic weight in the canary version to 100% and discard the traffic in the previous stable version of the application by running the following command:
oc argo rollouts promote rollouts-demo -n <namespace>
$ oc argo rollouts promote rollouts-demo -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
Watch the progression of your rollout by running the following command:
oc argo rollouts get rollout rollouts-demo --watch -n <namespace>
$ oc argo rollouts get rollout rollouts-demo --watch -n <namespace>1 Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the namespace where the
Rolloutresource is defined.
After successful completion, weight on the stable service is 100% and 0% on the canary service.
Chapter 6. Enabling support for a namespace-scoped Argo Rollouts installation Copy linkLink copied to clipboard!
Red Hat OpenShift GitOps enables support for two modes of Argo Rollouts installations:
- Cluster-scoped installation (default): The Argo Rollouts custom resources (CRs) defined in any namespace are reconciled by the Argo Rollouts instance. As a result, you can use Argo Rollouts CR across any namespace on the cluster.
Namespace-scoped installation: The Argo Rollouts instance is installed in a specific namespace and only handles an Argo Rollouts CR within the same namespace. This installation mode includes the following benefits:
-
This mode does not require cluster-wide
ClusterRoleorClusterRoleBindingpermissions. You can install and use Argo Rollouts within a single namespace without requiring cluster permissions. - This mode provides security benefits by limiting the cluster scope of a single Argo Rollouts instance to a specific namespace.
-
This mode does not require cluster-wide
To prevent unintended privilege escalation, Red Hat OpenShift GitOps allows only one mode of Argo Rollout installation at a time.
To switch between cluster-scoped and namespace-scoped Argo Rollouts installations, complete the following steps.
6.1. Configuring a namespace-scoped Argo Rollouts installation Copy linkLink copied to clipboard!
To configure a namespace-scoped instance of Argo Rollouts installation, complete the following steps.
Prerequisites
- You are logged in to the Red Hat OpenShift GitOps cluster as an administrator.
- You have installed Red Hat OpenShift GitOps on your Red Hat OpenShift GitOps cluster.
Procedure
- In the Administrator perspective of the web console, go to Administration → CustomResourceDefinitions.
-
Search for
Subscriptionand click the Subscription CRD. - Click the Instances tab and then click the openshift-gitops-operator subscription.
Click the YAML tab and edit the YAML file.
Specify the
NAMESPACE_SCOPED_ARGO_ROLLOUTSenvironment variable, with the value set totruein the.spec.config.envproperty.Example of configuring the namespace-scoped Argo Rollouts installation
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- The value set to
'true'enables namespace-scoped installation. If the value is set to'false'or not specified the installation defaults to cluster-scoped mode.
Click Save.
The Red Hat OpenShift GitOps Operator facilitates the reconciliation of the Argo Rollouts custom resource within a namespace-scoped installation.
Verify that the Red Hat OpenShift GitOps Operator has enabled the namespace-scoped Argo Rollouts installation by viewing the logs of the GitOps container:
- In the Administrator perspective of the web console, go to Workloads → Pods.
- Click the openshift-gitops-operator-controller-manager pod, and then click the Logs tab.
-
Look for the following log statement:
Running in namespaced-scoped mode. This statement indicates that the Red Hat OpenShift GitOps Operator has enabled the namespace-scoped Argo Rollouts installation.
Create a
RolloutManagerresource to complete the namespace-scoped Argo Rollouts installation:- Go to Operators → Installed Operators → Red Hat OpenShift GitOps, and click the RolloutManager tab.
- Click Create RolloutManager.
Select YAML view and enter the following snippet:
Example
RolloutManagerCR for a namespace-scoped Argo Rollouts installationCopy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify the name of the project where you want to install the namespace-scoped Argo Rollouts instance.
Click Create.
After the
RolloutManagerCR is created, Red Hat OpenShift GitOps begins to install the namespace-scoped Argo Rollouts instance into the selected namespace.
Verify that the namespace-scoped installation is successful.
-
In the RolloutManager tab, under the RolloutManagers section, ensure that the Status field of the
RolloutManagerinstance isPhase: Available. Examine the following output in the YAML tab under the RolloutManagers section to ensure that the installation is successful:
Example of namespace-scoped Argo Rollouts installation YAML file
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- This status indicates that the namespace-scoped Argo Rollouts installation is enabled successfully.
If you try to install a namespace-specific Argo Rollouts instance while a cluster-scoped installation already exists on the cluster, an error message is displayed:
Example of an incorrect installation with an error message
Copy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- This status indicates that the namespace-scoped Argo Rollouts installation is not enabled successfully. The installation defaults to cluster-scoped mode.
-
In the RolloutManager tab, under the RolloutManagers section, ensure that the Status field of the
Chapter 7. Configuring traffic management and metric plugins in Argo Rollouts Copy linkLink copied to clipboard!
Argo Rollouts supports configuring traffic management and metric plugins directly through the RolloutManager Custom Resource (CR). The native support for these plugins in Argo Rollouts eliminates the need to modify the config map manually, ensuring a consistent configuration across the system. As a result, Argo Rollouts no longer preserves user-defined plugins in the config map. Instead, it only applies to the plugins specified within the RolloutManager CR. By managing plugins directly within the RolloutManager CR, you can do the following:
- Centralize plugin configuration control.
-
Avoid conflicts between the
RolloutManagerCR and config map. - Simplify plugin management by allowing easy addition, removal, or modification of plugins without editing the config map directly.
The traffic management plugin controls how traffic routes between different versions of your application during a rollout, while the metric plugin collects and evaluates metrics to determine the success or failure of a rollout.
7.1. Prerequisites Copy linkLink copied to clipboard!
- You have logged in to the OpenShift Container Platform cluster as an administrator.
- You have access to the OpenShift Container Platform web console.
- You have installed Red Hat OpenShift GitOps on your OpenShift Container Platform cluster.
- You have installed Argo Rollouts on your OpenShift Container Platform cluster.
7.2. Enabling traffic management and metric plugins in Argo Rollouts Copy linkLink copied to clipboard!
To enable traffic management and metric plugins in Argo Rollouts, complete the following steps.
Procedure
- Log in to the OpenShift Container Platform web console as a cluster administrator.
- In the Administrator perspective, click Operators → Installed Operators.
-
Create or select the project where you want to create and configure a
RolloutManagercustom resource (CR) from the Project drop-down menu. - Select Red Hat OpenShift GitOps from the Installed Operators.
- In the Details tab, under the Provided APIs section, click Create instance in the RolloutManager pane.
On the Create RolloutManager page, select the YAML view and edit the YAML.
Example adding the traffic management and metric plugins configuration in the
RolloutManagerCRCopy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specifies the name of the
trafficManagementplugin. - 2
- Specifies the location of the
trafficManagementplugin. - 3
- Specifies the name of the
metricplugin. - 4
- Specifies the location of the
metricplugin. - 5
- Optional: Specifies the SHA256 signature of the plugin binary, which is downloaded and installed by the Rollouts controller.
- Click Create.
- In the RolloutManager tab, under the RolloutManagers section, verify that the Status field of the RolloutManager instance shows as Phase: Available.
Verify that the traffic management and metric plugins are installed correctly by completing the following steps:
- In the Administrator perspective, click Workloads → ConfigMaps.
Click the argo-rollouts-config config map.
As a result, the plugins defined in the
RolloutManagerCR are updated in the argo-rollouts-config config map.Example updated traffic management and metric plugins in the argo-rollouts-config
ConfigMapCopy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specifies the name of the
metricplugin. - 2
- Specifies the location of the
metricplugin. - 3
- Specifies the sha256 signature of the
metricplugin. - 4
- Specifies the name of the
trafficmanagementplugin. - 5
- Specifies the location of the
trafficmanagementplugin. - 6
- Specifies the sha256 signature of the
trafficmanagementplugin. - 7
- Specifies the name of the default
trafficmanagementplugin. - 8
- Specifies the location of the default
trafficmanagementplugin. - 9
- Specifies the sha256 signature of the
trafficmanagementplugin.
By configuring traffic and metric plugins directly through the
RolloutManagerCR, you streamline the rollout process, reduce the chance of errors, and ensure consistent plugin management across your environment. This enhances control and flexibility while simplifying deployment procedures.
Chapter 8. Enabling high availability support for Argo Rollouts Copy linkLink copied to clipboard!
Argo Rollouts support enabling high availability (HA) in the RolloutManager Custom Resource (CR). When you configure high availability in Argo Rollouts, the Red Hat OpenShift GitOps Operator automatically sets the number of pods to 2 for the Argo Rollouts controller using the .spec.ha field in the RolloutManager CR. It also activates leader election, allowing the pods to run in an active-passive process. A single pod actively manages rollouts, while the other pod remains in a passive state, ensuring the additional replica provides redundancy and availability if a node fails.
This feature benefits the Rollouts controller by ensuring it runs without downtime or manual intervention. It also operates during planned maintenance, as the second replica ensures the controller runs smoothly. Enabling high availability in Argo Rollouts ensures the controller remains reliable and resilient, even during node failures or heavy workloads.
The Red Hat OpenShift GitOps Operator also ensures that anti-affinity rules apply by default. Although these rules are not user-defined, they ensure the controller pods distribute across different nodes to avoid a single point of failure, providing resilience against node failure.
Prerequisites
- You are logged in to the OpenShift Container Platform cluster as an administrator.
- You installed Red Hat OpenShift GitOps on your OpenShift Container Platform cluster.
- You installed Argo Rollouts on your OpenShift Container Platform cluster.
8.1. Configuring high availability for Argo Rollouts Copy linkLink copied to clipboard!
To enable high availability, configure the ha specification in the RolloutManager custom resource (CR) by completing the following steps:
Procedure
- Log in to the OpenShift Container Platform web console as a cluster administrator.
- In the Administrator perspective, click Operators → Installed Operators.
-
Create or select the project where you want to create and configure a
RolloutManagerCR from the Project drop-down menu. - Select Red Hat OpenShift GitOps from the installed Operators.
- In the Details tab, under the Provided APIs section, click Create instance in the RolloutManager pane.
On the Create RolloutManager page, select the YAML view and edit the YAML.
Example enabling the
hafield in theRolloutManagerCRCopy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specifies whether high availability is enabled or not. If the value is set to
true, high availability is enabled.
- Click Create.
- In the RolloutManager tab, under the RolloutManagers section, verify that the Status field of the RolloutManager instance shows Phase: Available.
Verify the status of the Rollouts deployment by completing the following steps:
- In the Administrator perspective, click Workloads → Deployments.
- Click the argo-rollouts deployment.
- Click the Details tab and confirm that the number of replicas in the Rollouts deployment is now set to 2.
Click the YAML tab and confirm that the following configuration is displayed:
Example Argo Rollouts deployment configuration file
Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Chapter 9. Using a cluster-scoped Argo Rollouts instance to manage rollout resources Copy linkLink copied to clipboard!
By default, Argo Rollouts supports the cluster-scoped mode of installation for Argo Rollouts custom resources (CRs). This mode of installation uses the CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES environment variable to specify a list of namespaces that can be used to manage the rollout resources.
To manage Argo Rollouts resources, after you install the Red Hat OpenShift GitOps Operator on the cluster, you can create and configure a RolloutManager custom resource (CR) instance in the namespace of your choice. You can then update the existing Subscription object for the Red Hat OpenShift GitOps Operator and add user-defined namespaces to the CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES environment variable in the spec section of the Argo CD instance.
9.1. Prerequisites Copy linkLink copied to clipboard!
- You have logged in to the OpenShift Container Platform cluster as an administrator.
- You have installed the Red Hat OpenShift GitOps Operator on your OpenShift Container Platform cluster.
-
You have created a
RolloutManagercustom resource.
9.2. Configuring a cluster-scoped Argo Rollouts instance to manage rollout resources Copy linkLink copied to clipboard!
To configure a cluster-scoped Argo Rollouts instance for managing rollout resources, add the CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES environment variable in the Subscription resource. This variable contains a list of user-defined namespaces which can be configured for a cluster-scoped Argo Rollouts installation. If the CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES environment variable is empty, you can create cluster-scoped Argo Rollouts installation in the openshift-gitops namespace.
You can only create a cluster-scoped Argo Rollouts instance if the NAMESPACE_SCOPED_ARGO_ROLLOUTS variable is set to false. By default, if the NAMESPACE_SCOPED_ARGO_ROLLOUTS variable is not defined, it is set to false.
Procedure
- In the Administrator perspective of the web console, navigate to Operators → Installed Operators → Red Hat OpenShift GitOps → Subscription.
- Click the Actions list and then click Edit Subscription.
On the openshift-gitops-operator Subscription details page, under the YAML tab, edit the
SubscriptionYAML file by adding the namespace of the Argo CD instance to theCLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACESenvironment variable in thespecsection:Example configuring the
CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACESenvironment variableCopy to Clipboard Copied! Toggle word wrap Toggle overflow - 1
- Specify this value to enable or disable the cluster-scoped installation. If the value is set to
'false', it means that the you have enabled cluster-scoped installation. If it is set to'true', it means that you have enabled namespace-scoped installation. If the value is empty, it is set tofalse. - 2
- Specifies a comma-separated list of namespaces that can host a cluster-scoped Argo Rollouts instance, for example
test-123-cluster-scoped,test-456-cluster-scoped.
- Click Save and Reload.