Chapter 3. Configure webhook secrets for Git providers

Procedure

1. Create a Secret resource in the same namespace as the ArgoCD CR and configure the spec.webhookSecrets field in the ArgoCD CR.

   The following example configures a webhook secret for GitHub:

   apiVersion: v1
   kind: Secret
   metadata:
     name: github-webhook-credentials
     namespace: argocd
     labels:
       app.kubernetes.io/part-of: argocd
       app.kubernetes.io/component: webhook
   type: Opaque
   stringData:
     token: "your-github-webhook-secret"
   ---
   apiVersion: argoproj.io/v1beta1
   kind: ArgoCD
   metadata:
     name: example-argocd
     namespace: argocd
   spec:
     webhookSecrets:
       github:
         webhookSecretRef:
           name: github-webhook-credentials
           key: token

2. Apply the configuration:

   $ oc apply -f webhook-secret.yaml

Procedure

1. Run the following command to verify the configured GitHub webhook secret:

   $ oc get secret argocd-secret -n <namespace> -o jsonpath='{.data.webhook\.github\.secret}' | base64 -d

   where:

   <namespace>

   Specifies the namespace where your Argo CD instance is installed, such as openshift-gitops for the default instance.

2. Verify that the command output matches the value stored in the Secret referenced by spec.webhookSecrets.github.webhookSecretRef.