cleanstart/argocd-extension-installer repository overview

⁠Overview

The Argo CD Extension Installer is a utility container designed to manage and install extensions for Argo CD, the declarative GitOps continuous delivery tool for Kubernetes. It provides automated installation and configuration of Argo CD plugins, custom tooling, and additional functionality modules while maintaining security and compliance standards.

📌 CleanStart Foundation: Security-hardened, minimal base OS designed for enterprise containerized environments.

⁠Key Features

• Automated Argo CD extension management and installation
• Plugin lifecycle management and version control
• Custom resource definition (CRD) handling
• Integration with existing Argo CD deployments
• Security hardened: Non-root, minimal attack surface
• FIPS compliance: Available with -fips tag

⁠Common Use Cases

• Installing custom visualization plugins for Argo CD
• Adding new application deployment strategies
• Integrating external tools and services with Argo CD
• Extending Argo CD's native capabilities with custom functionality

# Pull commands
docker pull cleanstart/argocd-extension-installer:latest
docker pull cleanstart/argocd-extension-installer:latest-dev

⁠Quick Start

⁠Basic Production Deployment

Standard production deployment with recommended settings

docker run \
  -v /path/to/extensions:/extensions \
  -e ARGOCD_SERVER=argocd-server.example.com \
  -e EXTENSION_URL=https://github.com/argoproj-labs/argocd-extension-metrics/releases/download/v1.0.0/extension.tar.gz \
  cleanstart/argocd-extension-installer:latest

Extensions will be installed in the configured Argo CD instance

⁠Development/Testing

Development setup with debugging capabilities

docker run -it --privileged \
  -e EXTENSION_URL=https://github.com/argoproj-labs/argocd-extension-metrics/releases/download/v1.0.0/extension.tar.gz \
  --entrypoint /bin/sh \
  cleanstart/argocd-extension-installer:latest-dev
docker run -v /path/to/extensions:/extensions \
  -e ARGOCD_SERVER=localhost:8080 \
  -e EXTENSION_URL=https://github.com/argoproj-labs/argocd-extension-metrics/releases/download/v1.0.0/extension.tar.gz \
  -e DEBUG=true \
  cleanstart/argocd-extension-installer:latest-dev

⁠Docker Compose

version: '3.8'
services:
argocd-extension-installer:
image: cleanstart/argocd-extension-installer:latest
container_name: argocd-extension-installer
restart: unless-stopped
environment:
- ARGOCD_SERVER=localhost:8080
      - EXTENSION_URL=https://github.com/argoproj-labs/argocd-extension-metrics/releases/download/v1.0.0/extension.tar.gz
      - DEBUG=true
    volumes:
- /path/to/extensions:/extensions
      - /path/to/config:/config
    security_opt:
- no-new-privileges:true
    read_only: true
tmpfs:
- /tmp

⁠Configuration

⁠Environment Variables

⁠Command Arguments

Common command line arguments

docker run \
  -v /path/to/extensions:/extensions \
  -e EXTENSION_URL=https://github.com/argoproj-labs/argocd-extension-metrics/releases/download/v1.0.0/extension.tar.gz \
  cleanstart/argocd-extension-installer:latest \
  --dry-run --verbose

⁠Common Flags

• --dry-run: Simulate installation without making changes
• --verbose: Enable detailed logging
• --skip-verify: Skip extension signature verification

⁠Security & Best Practices

⁠Recommended Security Context

securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  runAsGroup: 1000
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
  capabilities:
    drop: ["ALL"]

⁠Best Practices

• Use specific image tags for production (avoid latest)
• Configure resource limits: memory: 1Gi, cpu: 500m
• Enable read-only root filesystem
• Regularly update container images
• Verify extension signatures before installation
• Monitor container metrics for anomalies

⁠Architecture Support

⁠Multi-Platform Images

docker pull --platform linux/amd64 cleanstart/argocd-extension-installer:latest
docker pull --platform linux/arm64 cleanstart/argocd-extension-installer:latest

• CleanStart Website: https://www.cleanstart.com⁠
• Argocd-Extension-Installer Official: https://argo-cd.readthedocs.io/en/latest/proposals/002-ui-extensions/⁠
• CleanStart Community Images: https://hub.docker.com/u/cleanstart⁠
• CleanStart All Images: https://images.cleanstart.com/images/argocd-extension-installer/details⁠
• How-to-Run CleanStart Images & Sample Projects:  https://github.com/cleanstart-containers/argocd-extension-installer⁠,
  • how-to-Run sample projects using dockerfile
  • how-to-Deploy via Kubernete YAML
  • how-to-Migrate from public images to CleanStart images

⁠Vulnerability Disclaimer

CleanStart offers Docker images that include third-party open-source libraries and packages maintained by independent contributors. While CleanStart maintains these images and applies industry-standard security practices, it cannot guarantee the security or integrity of upstream components beyond its control.

Users acknowledge and agree that open-source software may contain undiscovered vulnerabilities or introduce new risks through updates. CleanStart shall not be liable for security issues originating from third-party libraries, including but not limited to zero-day exploits, supply chain attacks, or contributor-introduced risks.

Security remains a shared responsibility: CleanStart provides updated images and guidance where possible, while users are responsible for evaluating deployments and implementing appropriate controls.