> ## Content Index > Fetch the complete content index at: https://devopscube.com/llms.txt > Use this file to discover other available public pages before exploring further. # How to Deploy Argo CD on Kubernetes: A Beginner's Guide - URL: https://devopscube.com/setup-argo-cd-using-helm/ - Published: 2026-03-26T04:58:00.000Z - Updated: 2026-04-24T14:36:43.000Z - Author: Aswin Vijayan - Tags: HOW TO GUIDES, Kubernetes, #Migrated-1741795015845, #wp, #wp-post, #Import 2025-03-12 15:57, #blog, ARGOCD, #syntax-highlight In this blog, we will look at Argo CD installation on Kubernetes using step-by-step instructions. After the installation, we will look at deploying sample applications the **GitOps way**. We will use a git repository to deploy the application using Argo CD. We will also look at configuring GitHub webhooks to enable the sync process as soon as there is a change in the configured git repository. Before going into the setup, make sure you have a clear understanding of the [Argo CD architecture](https://devopscube.com/argo-cd-architecture/). ## What is Argo CD? [Argo CD](https://argo-cd.readthedocs.io/?ref=devopscube.com) is a declarative, GitOps CD tool for Kubernetes, which helps you to manage applications using the [Kubernetes](https://devopscube.com/kubernetes-tutorials-beginners) deployment YAML file stored in the Git repository. Argo CD uses the GitOps principle, which means Argo CD continuously monitors the repository, detects changes, and deploys them. Argo CD uses a pull-based deployment, which means whenever a change is made to the [deployment](https://devopscube.com/kubernetes-deployment-tutorial/) YAML file in the GitHub repository, Argo CD detects, pulls, and automatically deploys the latest changes. Given below is a simple workflow of Argo CD components. ![argocd workflow](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/ArgoCD-Architecture2.png) Below is the list of each Argo CD component. 1. **argocd application controller (Statefulset):** A core component of Argo CD that is responsible for managing and synchronizing applications (reconciliation) deployed in a Kubernetes cluster with the desired state in Git 2. **argocd application set (Deployment):** A controller that automatically generates and manages Argo CD Applications based on a template. 3. **argocd notification** (**Deployment**): Sends notifications about Argo CD events to various channels like email, Slack, or webhooks. 4. **argocd reposerver (Deployment):** The component that manages Git repositories and provides an API for accessing and synchronizing application manifests. 5. **argocd server (Deployment):** The main component that exposes the Argo CD API and serves the web UI for managing applications and configurations. 6. **dex server (Deployment):** It is an identity provider that can be integrated with Argo CD for user authentication and authorization with external identity providers (OIDC Providers) like GitHub, SAML etc. 7. **Redis** **(Deployment)** : Used for caching to reduce request sent to Kube API and to Git provider. ## Prerequisites To get started with the setup, you should have the following. 1. A working [Kubernetes cluster](https://devopscube.com/setup-kubernetes-cluster-kubeadm/) 2. [Kubectl](https://devopscube.com/kubectl-set-context/) configured with the cluster 3. [Helm installed](https://devopscube.com/install-configure-helm-kubernetes/) on your workstation. We will see about two deployment methods of Argo CD, one is using manifest and the other using Helm. Lets get started with the setup. ## Argo CD Setup Using Manifest Files The easiest way to set up Argo CD on Kubernetes is using plain Kubernetes manifest files available in the Argo project GitHub repository. If you are setting up Argo CD for project requirements, use the Helm charts given in the next section. We will deploy Argo CD in a custom namespace called `argocd`. The following kubectl commands will create the namespace and deploy the manifest. ```bash kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml ``` 💡 The `server-side` flag ignores the annotation size limit because some CRDs have annotation size bigger than 262KB. And the `force-conflicts` flag prevents conflict between server-side and client-side fields by changing the ownership of fields to server-side. This command creates [Kubernetes objects](https://devopscube.com/kubernetes-objects-resources/) related to Argo CD Namespace scoped and cluster scoped resources. The key objects are Argocd services, deployments, and statefulsets, ClusterRoles, Configmaps, and Secrets. It also created Argo CD custom resources like **applications**, **applicationsets** and **appprojects.** You can access the Argo CD UI in our workstation using the following port forwarding command. ```bash kubectl port-forward svc/argocd-server -n argocd 8080:443 ``` You will get an SSL error due to **self-signed certificate** added to the Argo CD server. You can click proceed to access the UI. ![argocd not secured ui](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-90.png) To login to the UI, you need a username and password. The default username is **`admin`**. To get the password, execute the following command. ```bash kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 --decode ; echo ``` Once logged in, you will get the Argo CD server dashboard as shown below. ![Argo CD server dashboard.](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-91.png) You can clean up the setup using the following command. ```bash kubectl delete -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml ``` ## How to Deploy Argo CD Using Helm Chart If you are setting up Argo CD for project purposes, we highly recommend you setup using Helm charts rather than plain manifest files. Because with plain manifest, you need to find and modify each RAW YAML file each time and re-apply it. But with Helm, all configurations are managed in a single values file, you just need to update it and run the Helm upgrade command. Follow the steps given below to setup Argo CD using the **official Argoproject helm chart.** ### Step 1: Add Argo CD repo Add the Argo CD repo to your system to download the Helm chart for set up. Run the following command to add the repo. ```bash helm repo add argo https://argoproj.github.io/argo-helm ``` Now, list every repo with the word argo using the command ```bash helm search repo argo ``` You will get the list of repos with the word argo as shown below. The chart we need is `argo-cd`. ```bash $ helm search repo argo NAME CHART VERSION APP VERSION argo/argo 1.0.0 v2.12.5 argo/argo-cd 9.5.0 v3.3.6 argo/argo-ci 1.0.0 v1.0.0-alpha2 argo/argo-events 2.4.21 v1.9.10 argo/argo-lite 0.1.0 argo/argo-rollouts 2.40.9 v1.9.0 argo/argo-workflows 1.0.7 v4.0.4 argo/argocd-applicationset 1.12.1 v0.4.1 argo/argocd-apps 2.0.4 argo/argocd-image-updater 1.1.5 v1.1.1 argo/argocd-notifications 1.8.1 v1.2.1 my-repo/argo-cd 11.0.0 3.1.1 my-repo/argo-workflows 13.0.6 3.7.1 community-charts/cloudflared 2.2.7 2026.2.0 ``` ### Step 2: Customize Helm Chart Configuration Values Before deploying, you need to update **NodePort** configurations in the Helm chart so that you can access Argo CD UI in the browser. For that, use the below command to save the default values of the Helm chart in a YML file. ```bash helm show values argo/argo-cd > values.yaml ``` Make changes in the **service configuration block**. Change the type from **ClusterIP** to **NodePort** as shown in the below image. It is responsible for exposing the Argo CD server UI. The default nodePort is `30080`. You can customize that as well. ![changing service type to nodeport](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-94.png) Below is the custom values file, which only has the configuration to change the service type of the Argo CD server component. ```yaml server: service: type: NodePort nodePortHttp: 30080 nodePortHttps: 30443 ``` By changing the type to NodePort you can access Argo CD UI on the browser using the URL **:**. 💡 Use loadbalancer to expose Argo CD in production environment Make sure to use the **same node port number** you mentioned in the **`values.yml`** file. 💡 If you want to set up Argo CD in an private environment ****without access to these public registries**, you might have to upload the image to the relevant **internal registry** and then run the helm chart with custom values. ### Step 3: Deploy Argo CD Now, use the below command to deploy Argo CD in the argocd namespace. ```bash helm install -f values.yaml argocd argo/argo-cd -n argocd --create-namespace ``` On a successful deployment, you should see the following output. ![argocd helm deployment](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-95.png) Now, run the following command to check if the pods are up and running. ```bash $ kubectl get po -n argocd NAME READY STATUS RESTARTS AGE argocd-application-controller-0 1/1 Running 0 2m53s argocd-applicationset-controller-48css 1/1 Running 0 2m54s argocd-dex-server-8f5687997-8txcr 1/1 Running 0 2m53s argocd-notifications-controller-4jdd4 1/1 Running 0 2m54s argocd-redis-fcd76bcfb-xnlgt 1/1 Running 0 2m54s argocd-repo-server-7b8447858f-6fvsj 1/1 Running 0 2m54s argocd-server-7f857f54f-5t466 1/1 Running 0 2m54s ``` All the pods are running, lets try accessing the UI. ### Step 4: Log in to Argo CD Web UI Since we have enabled the `NodePort` on `30080`, you can use the public IP or Private IP of any node of your cluster with the node port number in the format **:**. In my case, the URL will be **168.144.64.114:30080.** Now, access the UI in your browser using the URL, you will get the following window ![argocd ui](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2025/03/2023-12-15_15-38-54-1.png) Login to Argo CD using the username and password. Your **default username** will be **admin,** and run the following command to get the password. ```bash kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 --decode ; echo ``` This command will show your password for Argo CD, use the password and log in to Argo CD UI. Once you log in you can see the home screen of Argo CD as shown below. ![argocd dashboard](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-107.png) ### Step 5: Change Default Admin Password We will not be using the default password for the admin user after login. Lets, update the admin password. The simplest way to update the password is through the UI. From the dashboard, go to User Info and click UPDATE PASSWORD. ![](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-108.png) A new pop up will appear to change the password. In there, you need to give the current and new passwords you need to update. ![](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-109.png) Then click the SAVE NEW PASSWORD button to update the new password. That's it, you will get a password update successful message after a successful update. The other method for updating a password and managing users is done using the ArgoCD CLI. Refer to the [user management](https://devopscube.com/create-a-new-account-in-argo-cd) blog for more information about user management. ## Deploying Applications on GitHub using Argo CD (GitOps Way) Now that we have the Argo CD setup ready, we can test an Nginx deployment that shows a custom message on the index page exposed on NodePort 32000. We have the Nginx deployment files in the [Argo CD Guide repository.](https://github.com/techiescamp/argocd-guide?ref=devopscube.com) ```bash git clone https://github.com/techiescamp/argocd-guide.git cd argocd-guide/nginx-deployment ``` You can see the manifests are organized under the `nginx-deployment` folder as shown below. ```bash ➜ nginx-deployment ├── configmap.yaml ├── deployment.yaml └── service.yaml ``` From the Argo CD dashboard press the **\+ NEW APP** button to configure the repository. ![create new app in argo cd](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-93.png) A new window will pop up, specify the Application Name as **nginx-deployment**, give the Project Name as `default`, and set the SYNC POLICY to automatic or manual as you like. If you set the `SYNC POLICY` to automatic, Argo CD automatically detects the changes made in your Git repository and triggers the deployment, or if you set the SYNC POLICY to manual you have to trigger it manually to start the deployment. By **default the automatic sync uses polling** to find the changes that happens in the git repository. The default **polling interval is three minutes (180 seconds)**. It is a configurable option in the helm chart. You can modify `timeout.reconciliation` as per your sync requirement. Also enable **AUTO-CREATE NAMESPACE** option so that namespace will be created if it doesn't exist. ![create an application in argocd](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-96.png) Also, there are other SYNC POLICY options, enable them as per your need. Now, add the source information which is your Git repository URL, and the path of the YAML file. ![create an application in argocd](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-97.png) Then, select the **Cluster URL,** which will be shown when you select the Cluster URL tab. Select `https://kubernetes.default.svc` as we are deploying the application on the same cluster where Argo CD is deployed. Also specify the namespace as **webserver**. Then, click the **Create button** as shown below. ![create an application in argocd](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-99.png) When you click the create button it will sync the repository manifests and deploy it. You can see the deployment information in the dashboard as shown below. ![application deploy using argocd](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-100.png) Click the application to see detailed info about your deployment as shown below. ![application deploy using argocd](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-101.png) To validate our deployment, lets try to access the Nginx deployment on NodePort 32000\. You should see a page as shown below. ![accessing the application deployed using argocd](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-106.png) ## How to Configure GitHub Webhook for Argo CD? Even though **Argo CD continuously monitors Git for changes** there is a time delay in syncing the changes. To remove the time delay we can use webhook which triggers the sync process as soon as a change is made in Git. Let's look at how to configure a webhook on Argo CD. First, go to your Git repository which you configured with Argo CD then go to **Setting->Webhooks->Add webhook** as shown in thebelow image to configure webhooks. ![](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2025/03/image-2-28.png) After pressing the Add webhook button you can see the configuration window as shown below. The Payload URL would be the Argo CD webUI endpoint appended with **/api/webhook**. That is **:/api/webhook** For example, **https://34.71.163.101:30080/api/webhook.** Change the **Content type** to **application/json**, and give the **Secret** as you like. ![configure webhook for argocd](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-103.png) Now, select Enable SSL verification if you are using an SSL certificate for your Argo CD, and select Disable if you are not using an SSL certificate. Then select the event in which you like to trigger the webhook, it will trigger the webhook according to the event you select. ![](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2025/03/image-4-28.png) Click the **Add webhook** button to add the webhook configuration for your Argo CD, you can see the webhook has been added as shown below. ![argocd webhook configured](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-104.png) By selecting it you can see the triggers made by the hook as shown below. ![argocd webhook configured](https://storage.ghost.io/c/5f/2f/5f2f4d20-2abf-4534-8d40-7aa233aedd43/content/images/2026/04/image-105.png) ## Clean UP If you no longer need the setup, run the following command. ```bash helm delete argocd -n argocd ``` ## Argo CD Setup Best Practices Following are some of the best practices you need to follow when running Argo CD for production use cases. 1. It is a standard practice to run one Argo CD instances per environment (dev, stage, prod) to avoid potential conflicts. 2. Ensure you enable RBAC to limit access to the Argo CD instance to follow the principle of least privilege. Categorize users based on roles and responsibilities and audit them regularly. 3. Patch the Argo CD image regularly to avoid security vulnerabilities. 4. Backup Argo CD configuration for disaster Recovery and backup purposes. 5. Setup monitoring and alerting using tools like [Prometheus](https://devopscube.com/prometheus-architecture/) for events like [deployment ](https://devopscube.com/kubernetes-deployment-tutorial/)failures, resource constraints, etc. ## Argo CD Configuration FAQ's ### How does Argo CD store data? Since Argo CD is a stateless app, it doesn't need any volumes to store data. All the data is stored as [Kubernetes Objects](https://devopscube.com/kubernetes-objects-resources/). So ultimately, all the Argo CD data is stored in Kubernetes etcd. Also, it uses Redis as a throwaway cache. If you want a study guide for Certified Argo Project Associate (CAPA), then here is the [detailed study guide](https://devopscube.com/certified-argo-project-associate/). ### How to change the default admin password in Argo CD? You can either update the password from the Argo CD UI or use Argo CD CLI commands to update it. ## Conclusion In summary, we have seen about deploying Argo CD using both the manifest method and the Helm method. Also, we tested Argo CD by deploying an application manifest on GitHub in a GitOps way and configured a webhook for the repository.