Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@janus-idp/backstage-plugin-argocd
Advanced tools
Your plugin has been added to the example app in this repository, meaning you'll be able to access it by running yarn start
in the root directory, and then navigating to /argocd/deployment-lifecycle.
You can also serve the plugin in isolation by running yarn start
in the plugin directory.
This method of serving the plugin provides quicker iteration speed and a faster startup and hot reloads.
It is only meant for local development, and the setup for it can be found inside the /dev directory.
@roadiehq/backstage-plugin-argo-cd-backend
plugin using the following command from the root directoryyarn workspace app add @roadiehq/backstage-plugin-argo-cd-backend
packages/backend/src/plugins/
directory.// packages/backend/src/plugins/argocd.ts
import { createRouter } from '@roadiehq/backstage-plugin-argo-cd-backend';
import { PluginEnvironment } from '../types';
export default async function createPlugin({
logger,
config,
}: PluginEnvironment) {
return await createRouter({ logger, config });
}
// packages/backend/src/index.ts
import {legacyPlugin} from '@backstage/backend-common';
...
backend.add(legacyPlugin('argocd', import('./plugins/argocd')));
argocd:
appLocatorMethods:
- type: 'config'
instances:
- name: argoInstance1
url: https://argoInstance1.com
username: ${ARGOCD_USERNAME}
password: ${ARGOCD_PASSWORD}
- name: argoInstance2
url: https://argoInstance2.com
username: ${ARGOCD_USERNAME}
password: ${ARGOCD_PASSWORD}
yarn workspace app add @janus-idp/backstage-plugin-argocd
entityPage.tsx
source file:// packages/app/src/components/catalog/EntityPage.tsx
import {
ArgocdDeploymentSummary,
ArgocdDeploymentLifecycle,
isArgocdConfigured,
} from '@janus-idp/backstage-plugin-argocd';
const overviewContent = (
<Grid container spacing={3} alignItems="stretch">
...
<EntitySwitch>
<EntitySwitch.Case if={e => Boolean(isArgocdConfigured(e))}>
<Grid item sm={12}>
<ArgocdDeploymentSummary />
</Grid>
</EntitySwitch.Case>
</EntitySwitch>
...
</Grid>
);
const cicdcontent = (
<EntitySwitch>
{/* ... */}
{/* highlight-add-start */}
...
<EntitySwitch.Case if={e => Boolean(isArgocdConfigured(e))}>
<Grid item sm={12}>
<ArgocdDeploymentLifecycle />
</Grid>
</EntitySwitch.Case>
{/* highlight-add-end */}
</EntitySwitch>
);
The following annotation is added to the entity's catalog-info.yaml
file to enable Argo CD features in the backstage instance:
annotations:
...
argocd/app-selector: 'rht-gitops.com/janus-argocd=quarkus-app'
To switch between argocd instances, you can use the following annotation
annotations:
...
argocd/instance-name: 'argoInstance2'
Note: If this annotation is not set, the plugin will default to the first Argo CD instance configured in the app.config.yaml
To install this plugin into Red Hat Developer Hub or Janus IDP via Helm use this configuration:
global:
dynamic:
includes:
- dynamic-plugins.default.yaml
plugins:
- package: ./dynamic-plugins/dist/roadiehq-backstage-plugin-argo-cd-backend-dynamic
disabled: false
- package: ./dynamic-plugins/dist/janus-idp-backstage-plugin-argocd
disabled: false
This plugin can be loaded in backstage showcase application as a dynamic plugin.
Follow the below steps -
yarn install
yarn tsc
yarn build
yarn export-dynamic
pkg=../plugins/argocd
archive=$(npm pack $pkg)
tar -xzf "$archive" && rm "$archive"
mv package $(echo $archive | sed -e 's:\.tgz$::')
app-config.yaml
or app-config.local.yaml
file.dynamicPlugins:
frontend:
janus-idp.backstage-plugin-argocd:
mountPoints:
- mountPoint: entity.page.overview/cards
importName: ArgocdDeploymentSummary
config:
layout:
gridColumnEnd:
lg: 'span 8'
xs: 'span 12'
if:
allOf:
- isArgocdAvailable
- mountPoint: entity.page.cd/cards
importName: ArgocdDeploymentLifecycle
config:
layout:
gridColumn: '1 / -1'
if:
allOf:
- isArgocdConfigured
For more detailed explanation on dynamic plugins follow this doc.
FAQs
Welcome to the argocd plugin!
We found that @janus-idp/backstage-plugin-argocd demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.