ArgoCD GnuPG signature verification

Documentation

Add signature keys to existing project

• argocd proj add-signature-key
• signature_keys in argocd_project Terraform resource.
• SignatureKeys in kind: AppProject

Example

gpg --list-secret-keys --keyid-format=long

gpg --armor --export [email protected] > my-public-key.asc

0) Create a new project and move application to project:

argocd proj create my-secure-proj -r <REPO_URL> --signature-keys <KEY_ID> 
argocd app set <APP_NAME> --project my-secure-proj

1) Add GPG to server

argocd gpg add --from /path/tomy-public-key.asc --grpc-web --insecure --server argocd.test.internal

2) Assign GPG to my-secure-proj

argocd proj set my-secure-proj --signature-keys 4AEE18F83AFDEB23,07E34825A909B250
(no output)

• argocd-gpg-keys-cm ConfigMap resource

 argocd proj set default --signature-keys <KEY_ID>

argocd proj add-signature-key myproj 4AEE18F83AFDEB23

Argo v1.7

• Argocd default project

Errors

• ComparisonError

Related

• InvalidSpecError
• SignatureKeys
• signature_keys
• argocd gpg list
• argocd proj edit
• Terraform resource: argocd project: signature_keys
• Migrate ApplicationSet to a new project

See also

• argocd gpg [ list | add ], ArgoCD GnuPG signature verification
• argocd proj [ list | edit | create | get | set | role | add-signature-key ], Terraform resource: argocd_project, kind: AppProject
• ArgoCD, Argo Workflows, Argo Events, Argo Rollouts, GnuPG verification
• GnuPG