Deploy on Kubernetes with ArgoCD

Introduction

Deploy on Kubernetes with Helm/HelmFile and ArgoCD.

Usage

Deploy environment

name: Pull Requeston:
pull_request:
branches: [ 'main' ]types: [opened, synchronize, reopened]jobs:
deploy:
runs-on: ubuntu-latestenvironment:
name: previewurl: ${{ steps.deploy.outputs.webapp-url }} steps:
- name: Configure AWS Credentialsuses: aws-actions/configure-aws-credentials@v1.7.0with:
aws-region: us-west-2role-to-assume: arn:aws:iam::111111111111:role/previewrole-session-name: deploy
- name: Deployuses: cloudposse/github-action-deploy-argocd@mainid: deploywith:
cluster: https://github.com/cloudposse/argocd-deploy-non-prod-test/blob/main/plat/ue2-sandbox/appstoolchain: helmfileenvironment: previewnamespace: previewapplication: test-appgithub-pat: ${{ secrets.GITHUB_AUTH_PAT }}repository: ${{ github.repository }}ref: ${{ github.event.pull_request.head.ref }}image: nginximage-tag: latestoperation: deploydebug: falsesynchronously: true

Destroy environment

name: Pull Requeston:
pull_request:
branches: [ 'main' ]types: [closed]jobs:
destroy:
runs-on: ubuntu-lateststeps:
- name: Configure AWS Credentialsuses: aws-actions/configure-aws-credentials@v1.7.0with:
aws-region: us-west-2role-to-assume: arn:aws:iam::111111111111:role/previewrole-session-name: destroy 
- name: Destroyuses: cloudposse/github-action-deploy-helmfile@mainid: destroywith:
cluster: https://github.com/cloudposse/argocd-deploy-non-prod-test/blob/main/plat/ue2-sandbox/appstoolchain: helmfileenvironment: previewnamespace: previewapplication: test-appgithub-pat: ${{ secrets.GITHUB_AUTH_PAT }}repository: ${{ github.repository }}ref: ${{ github.event.pull_request.head.ref }} image: "<none>"image-tag: "<none>"operation: destroydebug: false

Inputs

Name	Description	Default	Required
application	Application name	N/A	true
aws-region	AWS region	us-east-1	false
check-retry-count	Check retry count (for synchronously mode)	5	false
check-retry-interval	Check retry interval (in seconds) (for synchronously mode)	10	false
cluster	Cluster name	N/A	true
commit-retry-count	Commit retry count	4	false
commit-retry-interval	Commit retry interval (in seconds)	10	false
commit-status-github-token	Github token to access the app repository. Defaults to github-pat if not set.	N/A	false
commit-timeout	Commit timeout (in seconds)	60	false
debug	Debug mode	false	false
environment	Helmfile environment	preview	false
github-pat	Github PAT to access argocd configuration repository	N/A	true
gitref-sha	Git SHA (Depricated. Use ref instead)		false
helm-args	Additional helm arguments		false
helm-dependency-build	Run helm dependency build, only for helm toolchain, true or false	false	false
helm-version	Helm version	v3.20.1	false
helmfile-args	Additional helmfile arguments		false
helmfile-version	Helmfile version	v1.4.3	false
image	Docker image	N/A	true
image-tag	Docker image tag	N/A	true
kube-version	Kubernetes version for helm/helmfile rendering (e.g. 1.28). When provided, skips SSM metadata lookup via chamber.		false
namespace	Kubernetes namespace	N/A	true
operation	Operation with helmfiles. (valid options - deploy, destroy)	deploy	true
path	The path where lives the helmfile or helm chart.	N/A	true
ref	Git ref	N/A	true
release_label_name	The name of the label used to describe the helm release	release	false
repository	Application GitHub repository full name	N/A	true
ssm-path	SSM path to read environment secrets		false
synchronously	Wait until ArgoCD successfully apply the changes	false	false
toolchain	Toolchain ('helm', 'helmfile')	helmfile	false
values_file	Helm values file, this can be a single file or a comma separated list of files		false

Outputs

Name	Description
sha	Git commit SHA into argocd repo
webapp-url	Web Application url

Related Projects

Check out these related projects.

References

For additional context, refer to some of these links.

• github-actions-workflows - Reusable workflows for different types of projects

✨ Contributing

This project is under active development, and we encourage contributions from our community.

Many thanks to our outstanding contributors:

For 🐛 bug reports & feature requests, please use the issue tracker.

In general, PRs are welcome. We follow the typical "fork-and-pull" Git workflow.

1. Review our Code of Conduct and Contributor Guidelines.
2. Fork the repo on GitHub
3. Clone the project to your own machine
4. Commit changes to your own branch
5. Push your work back up to your fork
6. Submit a Pull Request so that we can review your changes

NOTE: Be sure to merge the latest changes from "upstream" before making a pull request!

🌎 Slack Community

Join our Open Source Community on Slack. It's FREE for everyone! Our "SweetOps" community is where you get to talk with others who share a similar vision for how to rollout and manage infrastructure. This is the best place to talk shop, ask questions, solicit feedback, and work together as a community to build totally sweet infrastructure.

📰 Newsletter

Sign up for our newsletter and join 3,000+ DevOps engineers, CTOs, and founders who get insider access to the latest DevOps trends, so you can always stay in the know. Dropped straight into your Inbox every week — and usually a 5-minute read.

📆 Office Hours

Join us every Wednesday via Zoom for your weekly dose of insider DevOps trends, AWS news and Terraform insights, all sourced from our SweetOps community, plus a live Q&A that you can’t find anywhere else. It's FREE for everyone!

License

Preamble to the Apache License, Version 2.0

Complete license is available in the LICENSE file.

Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements. See the NOTICE file
distributed with this work for additional information
regarding copyright ownership. The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License. You may obtain a copy of the License at
https://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied. See the License for the
specific language governing permissions and limitations
under the License.

Trademarks

All other trademarks referenced herein are the property of their respective owners.

---

Copyright © 2017-2026 Cloud Posse, LLC