Container Service for Kubernetes:Enable public network access for Argo Server

Prerequisites

• A Kubernetes cluster for distributed Argo workflows

• RAM user permissions granted

• Alibaba Cloud CLI 3.0.172 or later installed and credentials configured

Enable Internet access for Argo Server

1. Query cluster information and note the cluster ID.

   aliyun adcp DescribeHubClusters --Profile=XFlow

2. Get the public egress address of the user agent.

   Important

   Add only the required public CIDR block to the allowlist. Do not open access to all IP addresses.

   curl ifconfig.me

   If this command fails, ask your network administrator for the public CIDR block.

3. Enable Internet access and configure access control. This example uses 10.100.XX.XX/24 as the user agent CIDR block.

   aliyun adcp UpdateHubClusterFeature --RegionId regionId --ClusterId **** --PublicAccessEnabled true --AccessControlList "[\"10.100.XX.XX/24\"]" --ArgoServerEnabled true

   Key parameters:

   Parameter	Description
   --PublicAccessEnabled true	Enables Internet access for Argo Server
   --AccessControlList	The CIDR blocks allowed to access Argo Server
   --ArgoServerEnabled true	Enables Argo Server

Access the Argo Workflows UI

Open the Argo Workflows UI from the Distributed Cloud Container Platform for Kubernetes (ACK One) console.

1. Log on to the ACK One console. In the left-side navigation pane, click Workflow Cluster.

2. On the Basic Information page, click the Basic Information tab, and then click Workflow Console (Argo) in Common Operations.

   

3. In the left-side navigation pane of the workflow console, set NAMESPACE to default.

   

4. Click a workflow to view its details.