Chapter 3. Masking sensitive annotations in the Argo CD Web UI

Procedure

1. Log in to the OpenShift Container Platform web console.
2. In the Administrator perspective of the web console, click Operators Installed Operators.
3. From the Project list, create or select the project where you want to install the user-defined Argo CD instance.
4. From the installed Operators list, select Red Hat OpenShift GitOps, and then click the Argo CD tab.

5. To edit the Argo CD CR, complete the following steps:

   1. Under the .spec.extraConfig section, add the resource.sensitive.mask.annotations key.

   2. To mask a comma-separated list of values, specify the annotation key in the following YAML snippet:

      apiVersion: argoproj.io/v1beta1
      kind: ArgoCD
      metadata:
        name: example
      spec:
        extraConfig:
          resource.sensitive.mask.annotations: openshift.io/token-secret.value, api-key, token 

      1

      Copy to Clipboard Toggle word wrap

      1

      Specify a comma-separated list of sensitive annotation values, such as openshift.io/token-secret.value, api-key, and token.

6. To verify that the value in the Argo CD resource has been updated successfully, complete the following steps:

   1. In the Administrator perspective of the web console, click Operators Installed Operators.
   2. In the Project option, select the Argo CD namespace.
   3. From the installed Operators list, select Red Hat OpenShift GitOps, and then click the Argo CD tab.
   4. Verify that the Status field of the ArgoCD instance shows as Phase: Available.