Secure Connection to External Redis

[krcy]

Hi Team,

We need argocd to connect to the managed Redis with in-transit encryption enabled. So we need to provide Redis' ca-cert to Argocd. I guess we need --redis-use-tls and --redis-ca-certificate options for this.
See documentation.

Because we are using argo-helm charts in our setup, I want to ask if argo-helm charts support to provide redis certificates to securely connect to external managed Redis?

Thanks in advance.

[ChristopherLenz]

Hello, actually you said everything correctly. Unfortunately, the parameters you mentioned are not available as prepared parameters. But you can use the extraArgs without any problems. Here is an example for a Tls connection without specific certificates.

  controller:
    extraArgs:
      - --redis-use-tls
      - --redis-insecure-skip-tls-verify
  repoServer:
    extraArgs:
      - --redis-use-tls
      - --redis-insecure-skip-tls-verify
  server:
    extraArgs:
      - --redis-use-tls 
      - --redis-insecure-skip-tls-verify

See the appropriate PR for more examples: argoproj/argo-cd#6742

[krcy]

Thanks, we were able to connect by using redis' ca certificate in a secret volume.