Skip to main content
Version: 0.7 (Next)

Access Argo CD and Provisioning Logs

Reach Argo CD and workload cluster Terraform provisioning logs on your management cluster using kubectl port-forward.

SaaS Only

This page applies to the SaaS version of Konstruct (the Hosted Control Plane at konstruct.saas.konstruct.io). On the Self-Hosted Control Plane, Argo CD and provisioning logs are available on public URLs and no port-forwarding is needed.

Summary​

On the SaaS Hosted Control Plane, management cluster bootstrapping does not install external-dns and does not configure TLS certificates. This means:

  • Argo CD is not published on a public URL such as argocd.<your-domain>
  • The Terraform provisioning log stream for workload clusters is not published on a public URL

To access either service, download the management cluster kubeconfig and port-forward to the service inside the cluster.

Prerequisites​

  • A provisioned management cluster in Ready state
  • kubectl installed on your machine

Step 1: Download the Management Cluster Kubeconfig​

  1. In the left sidebar under Cluster Management, click Clusters.
  2. Click your management cluster.
  3. Click the ellipsis (...) and select Download kubeconfig.

In a terminal, point kubectl at the downloaded file:

export KUBECONFIG=~/Downloads/<your-management-cluster>-kubeconfig

Verify the connection:

kubectl get nodes

Step 2: Access Argo CD​

  1. Port-forward to the Argo CD server:

    kubectl port-forward svc/argocd-server -n argocd 8080:443

  2. Get the initial admin password:

    kubectl -n argocd get secret argocd-initial-admin-secret \
      -o jsonpath="{.data.password}" | base64 -d

  3. Open https://localhost:8080 in your browser.

  4. Log in with username admin and the password from step 2.

note

Your browser warns about a self-signed certificate because no TLS certificates are configured on the management cluster. This is expected — accept the warning to continue.

From here you can monitor cluster bootstrapping, sync status, and application health as described in Create a Management Cluster.

Step 3: Access Workload Cluster Terraform Provisioning Logs​

Workload cluster provisioning runs Terraform through the Crossplane provider-terraform on your management cluster. A log-streamer-service exposes the live Terraform logs on port 9090.

  1. Port-forward to the log streamer service:

    kubectl port-forward svc/log-streamer-service -n crossplane-system 9090:9090

  2. Open http://localhost:9090 in your browser.

  3. Enter <cluster-name>-infrastructure as the stream name, where <cluster-name> is the name of your workload cluster. For example, for a workload cluster named dev-workloads, enter dev-workloads-infrastructure.

Keep the port-forward running while the workload cluster provisions. The stream shows Terraform plan and apply output in real time.

tip

If the port-forward drops (for example, when the provider pod restarts), run the command again to reconnect.

What's Next?​