Comment Argo CD app diff on pull-requests

[maxbrunet]

1. List of all applications that have changed, our application label can be leveraged: argocd app list --selector=application=<name>
2. Get diff for each of them: argocd app diff <application-name> --hard-refresh --revision="${GITHUB_SHA}"
3. Comment diff on pull-requests with actions/github-script (see also) (Be mindful diff may be too large for a GitHub comment)

If needed (our server is public), authentication should be performed with a project role JWT token (ARGOCD_AUTH_TOKEN), see:

• https://argo-cd.readthedocs.io/en/stable/operator-manual/security/#authentication
• https://argo-cd.readthedocs.io/en/stable/user-guide/projects/#project-roles
• https://argo-cd.readthedocs.io/en/stable/user-guide/environment-variables/

[colethienes]

I have an app that does just this. I recently released a Github app called Infro that several companies use internally that allows Argo CD users to preview Kubernetes changes in Github pull requests before they merge. I’m providing it for free to open source projects (here’s an example in the wild). Here’s a setup guide with links to documentation. It’s in early stages, so I’m sure there will be warts. All feedback is welcome!

[metalmatze]

Hey @colethienes! That's cool!
That is exactly what we want and do internally without Argocd, too. 👍

[colethienes]

Nice! Does"without Argocd" mean you want to use helm diff? something else?