argocd

---
name: argocd
description: Deploy Kubernetes apps declaratively with Argo CD applications and projects. Use when tasks mention argocd, Argo CD, argocd app sync, Application CRD, AppProject, or GitOps with Argo CD.
license: MIT
metadata:
  author: greedychipmunk
  version: "1.0"
---

# Argo CD

Use this skill to manage GitOps deployments with Argo CD declaratively and safely.

## Quick Start

1. Run `argocd app list` to see all applications and their sync status.
2. Run `argocd app diff <name>` before any sync to preview what will change.
3. Use `argocd app sync <name>` to trigger a deployment.
4. Check `argocd app get <name>` for health and sync state after deploying.

## Intent Router

- `resources/install-and-setup.md` — install argocd CLI, login, env vars, initial setup
- `resources/command-cookbook.md` — argocd app list/get/create/sync/diff/history/rollback commands
- `resources/application-management.md` — Application CRD, sync policies, waves, hooks, health status
- `resources/rbac-and-projects.md` — AppProject CRD, RBAC policies, SSO, multi-tenancy

## Workflow

### Deploy an Application

```bash
# Preview changes before syncing
argocd app diff my-app

# Sync a specific application
argocd app sync my-app

# Sync only specific resources
argocd app sync my-app --resource apps:Deployment:my-deployment
```

### Create an Application

```bash
argocd app create my-app \
  --repo https://github.com/org/repo \
  --path k8s/overlays/production \
  --dest-server https://kubernetes.default.svc \
  --dest-namespace production \
  --sync-policy automated
```

### Monitor Health

```bash
argocd app get my-app
argocd app history my-app
argocd app rollback my-app 3
```

## Safety Guardrails

- Always run `argocd app diff <name>` before `argocd app sync` to preview what will change in production.
- Use `--dry-run` when creating or modifying Applications to validate configuration before committing.
- Set `syncPolicy.automated.prune: false` initially; enable pruning only after verifying the resource list is correct.
- Never share the `argocd-initial-admin-secret` — rotate the admin password immediately after first login.
- Use AppProject `sourceRepos` and `destinations` to restrict what repositories and clusters each team can deploy to.
- Use `argocd app sync --resource <group:kind:name>` to sync specific resources rather than triggering a full sync unnecessarily.
- Store repository credentials as Kubernetes secrets, not as plain-text in Application manifests.

## Related Skills

kubectl, helm

More agent context in greedychipmunk/agent-skills

21 other files this repository gives its agents.