About argocd-login
A skill for signing in to the Data Portal ArgoCD CLI through SSO. It establishes the CLI session needed before running ArgoCD commands or using ArgoCD MCP tools.
Key features
- 01SSO login with the ArgoCD CLI
- 02Configures gRPC-Web access
- 03Checks authentication status
- 04Shares CLI authentication with ArgoCD MCP
Use cases
- 01Sign in before listing ArgoCD applications
- 02Resolve CLI authentication errors
- 03Authenticate before ArgoCD MCP operations
MCP support
This skill establishes the CLI session required by ArgoCD MCP tools. The CLI and MCP server use the same local ArgoCD configuration.
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ laurigates/ claude-plugins --skill argocd-loginAfter installing, type/argocd-loginin Claude Code to confirm it loaded.
Details
From the project READMEArgoCD CLI Login
ArgoCD CLI authentication with SSO for the Data Portal cluster.
When to Use This Skill
| Use this skill when... | Use kubernetes-operations instead when... |
|---|---|
| Authenticating to ArgoCD CLI via SSO | Working directly with kubectl against the cluster |
| Resolving ArgoCD CLI auth errors before running argocd commands | Inspecting Kubernetes workloads without going through ArgoCD |
| Setting up gRPC-Web access to argocd.dataportal.fi | Using kubectl-debugging to debug a specific pod or node |
When to Use
Use this skill automatically when:
- User requests ArgoCD login or authentication
- User mentions accessing ArgoCD cluster or applications
- User needs to interact with ArgoCD CLI tools
- Authentication errors occur when using ArgoCD commands
Authentication Command
argocd login argocd.dataportal.fi --grpc-web --sso
Command Breakdown
argocd.dataportal.fi- Data Portal ArgoCD server endpoint--grpc-web- Enable gRPC-Web protocol (required for web-based SSO)--sso- Use Single Sign-On authentication (opens browser for OAuth2 flow)
Usage Flow
-
Detect authentication need:
- User explicitly requests login
- ArgoCD command fails with authentication error
- User mentions accessing ArgoCD cluster
-
Execute login command:
argocd login argocd.dataportal.fi --grpc-web --sso -
Guide user through SSO:
- Command will open browser automatically
- User completes SSO authentication in browser
- CLI receives token upon successful authentication
- Session is stored in
~/.config/argocd/config
-
Verify authentication:
argocd account get-user-info
Common ArgoCD Operations (Post-Login)
Application Management
# List applications
argocd app list
# Get application details
argocd app get <app-name>
# Sync application
argocd app sync <app-name>
# View application resources
argocd app resources <app-name>
Cluster Information
# List clusters
argocd cluster list
# Get cluster info
argocd cluster get <cluster-name>
Project Management
# List projects
argocd proj list
# Get project details
argocd proj get <project-name>
Authentication Session
- Session storage:
~/.config/argocd/config - Session persistence: Tokens have configurable expiration
- Re-authentication: Run login command again when session expires
Troubleshooting
Browser doesn't open
- Manually open the URL printed by the CLI
- Complete authentication in browser
- Token will be received by CLI
gRPC-Web errors
- Ensure
--grpc-webflag is present - Check network connectivity to
argocd.dataportal.fi - Verify firewall/proxy settings allow gRPC-Web traffic
SSO failures
- Verify SSO provider is accessible
- Check browser for authentication prompts
- Ensure popup blockers aren't interfering
- Try incognito/private browsing mode
Token expiration
- Re-run login command:
argocd login argocd.dataportal.fi --grpc-web --sso - Check token validity:
argocd account get-user-info
Integration with ArgoCD MCP
This skill complements the ArgoCD MCP server tools:
- MCP tools (
mcp__argocd-mcp__*) require authenticated CLI session - Use this skill to establish authentication before MCP operations
- Both use same configuration (
~/.config/argocd/config)
Security Considerations
- Token storage: CLI tokens stored locally in config file
- Token scope: Full ArgoCD access (read/write based on RBAC)
- Token rotation: Re-authenticate periodically for security
- Shared sessions: CLI and MCP share authentication state
Example Interaction
User: "I need to check the status of my ArgoCD applications"
Claude: I'll log you into ArgoCD first, then check the application status.
[Executes: argocd login argocd.dataportal.fi --grpc-web --sso]
Please complete the SSO authentication in the browser that just opened.
Once authenticated, I'll retrieve your application list.
[After successful auth, executes: argocd app list]
Here are your applications:
...
Related Skills
- Kubernetes Operations - For kubectl operations on ArgoCD-managed resources
- GitHub Actions Inspection - For CI/CD pipeline integration with ArgoCD
- Infrastructure Terraform - For infrastructure managed by ArgoCD applications
References
Comments
Markdown supported