Enable internet access for Argo Server in a workflow cluster - Container Service for Kubernetes

To use the Argo Workflows UI to submit or monitor jobs in a workflow cluster, enable Internet access for Argo Server so that you can reach the Argo console from outside the cluster.

Prerequisites

Before you begin, ensure that you have:

Enable Internet access for Argo Server

Query the cluster's basic information and record the cluster ID.
```
aliyun adcp DescribeHubClusters --Profile=XFlow
```
Get the public egress address of the user agent.

Important
Add only the required public CIDR block to the allowlist. Do not open access to all IP addresses.
```
curl ifconfig.me
```
If you cannot run this command, contact your network administrator to get the public CIDR block.

Enable Internet access and configure access control. The following example uses 10.100.XX.XX/24 as the public CIDR block of the user agent.

aliyun adcp UpdateHubClusterFeature --RegionId regionId --ClusterId **** --PublicAccessEnabled true --AccessControlList "[\"10.100.XX.XX/24\"]" --ArgoServerEnabled true

The following table describes the key parameters.

Parameter	Description
`--PublicAccessEnabled true`	Enables Internet access for Argo Server
`--AccessControlList`	Specifies the CIDR blocks allowed to access Argo Server
`--ArgoServerEnabled true`	Enables Argo Server

Access the Argo Workflows UI

After you enable Internet access, access the Argo Workflows UI from the Distributed Cloud Container Platform for Kubernetes (ACK One) console.

Log on to the ACK One console. In the left-side navigation pane, click Workflow Cluster.
On the Basic Information page, click the Basic Information tab, and then click Workflow Console (Argo) in the Common Operations section.
In the left-side navigation pane of the workflow console, set NAMESPACE to default to view workflows.
On the right side of the workflow page, click a workflow to go to the details page.