From 28619ce3dbdd4cd94a903d44263c4c62b1973ec1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Charles-Edouard=20Br=C3=A9t=C3=A9ch=C3=A9?=
 <charled.breteche@gmail.com>
Date: Tue, 22 Nov 2022 09:36:40 +0100
Subject: [PATCH] refactor: split argocd lab into multiple steps (#5410)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* refactor: argocd lab

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* refactor: split argocd lab into multiple steps

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix tempo

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---
 scripts/labs/argocd/0-cluster.sh              |  48 +++
 scripts/labs/argocd/1-ingress-nginx.sh        |  14 +
 scripts/labs/argocd/2-argocd.sh               |  46 +++
 .../labs/argocd/3-kube-prometheus-stack.sh    |  78 ++++
 scripts/labs/argocd/4-loki.sh                 |  30 ++
 scripts/labs/argocd/5-tempo.sh                |  52 +++
 scripts/labs/argocd/6-metrics-server.sh       |  32 ++
 scripts/labs/argocd/7-kyverno.sh              |  38 ++
 scripts/labs/argocd/8-kyverno-policies.sh     |  28 ++
 scripts/labs/argocd/9-policy-reporter.sh      |  45 +++
 scripts/labs/argocd/common-steps.sh           |  12 +
 scripts/labs/argocd/kind-argo.sh              | 368 +-----------------
 scripts/labs/argocd/minimal.sh                |  18 +
 13 files changed, 447 insertions(+), 362 deletions(-)
 create mode 100755 scripts/labs/argocd/0-cluster.sh
 create mode 100755 scripts/labs/argocd/1-ingress-nginx.sh
 create mode 100755 scripts/labs/argocd/2-argocd.sh
 create mode 100755 scripts/labs/argocd/3-kube-prometheus-stack.sh
 create mode 100755 scripts/labs/argocd/4-loki.sh
 create mode 100755 scripts/labs/argocd/5-tempo.sh
 create mode 100755 scripts/labs/argocd/6-metrics-server.sh
 create mode 100755 scripts/labs/argocd/7-kyverno.sh
 create mode 100755 scripts/labs/argocd/8-kyverno-policies.sh
 create mode 100755 scripts/labs/argocd/9-policy-reporter.sh
 create mode 100755 scripts/labs/argocd/common-steps.sh
 create mode 100755 scripts/labs/argocd/minimal.sh

diff --git a/scripts/labs/argocd/0-cluster.sh b/scripts/labs/argocd/0-cluster.sh
new file mode 100755
index 0000000000..690a045d40
--- /dev/null
+++ b/scripts/labs/argocd/0-cluster.sh
@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+
+set -e
+
+# DELETE CLUSTER
+
+kind delete cluster --name ${KIND_NAME:-argo} || true
+
+# CREATE CLUSTER
+
+kind create cluster --name ${KIND_NAME:-argo} --image ${KIND_IMAGE:-kindest/node:v1.24.4} --config - <<EOF
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+kubeadmConfigPatches:
+  - |-
+    kind: ClusterConfiguration
+    controllerManager:
+      extraArgs:
+        bind-address: 0.0.0.0
+    etcd:
+      local:
+        extraArgs:
+          listen-metrics-urls: http://0.0.0.0:2381
+    scheduler:
+      extraArgs:
+        bind-address: 0.0.0.0
+  - |-
+    kind: KubeProxyConfiguration
+    metricsBindAddress: 0.0.0.0
+nodes:
+  - role: control-plane
+    kubeadmConfigPatches:
+      - |-
+        kind: InitConfiguration
+        nodeRegistration:
+          kubeletExtraArgs:
+            node-labels: "ingress-ready=true"
+    extraPortMappings:
+      - containerPort: 80
+        hostPort: 80
+        protocol: TCP
+      - containerPort: 443
+        hostPort: 443
+        protocol: TCP
+  - role: worker
+  - role: worker
+  - role: worker
+EOF
diff --git a/scripts/labs/argocd/1-ingress-nginx.sh b/scripts/labs/argocd/1-ingress-nginx.sh
new file mode 100755
index 0000000000..87c6ba17fb
--- /dev/null
+++ b/scripts/labs/argocd/1-ingress-nginx.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+set -e
+
+# DEPLOY INGRESS-NGINX
+
+kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
+
+sleep 15
+
+kubectl wait --namespace ingress-nginx \
+  --for=condition=ready pod \
+  --selector=app.kubernetes.io/component=controller \
+  --timeout=90s
diff --git a/scripts/labs/argocd/2-argocd.sh b/scripts/labs/argocd/2-argocd.sh
new file mode 100755
index 0000000000..72b4c5df65
--- /dev/null
+++ b/scripts/labs/argocd/2-argocd.sh
@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+
+set -e
+
+# DEPLOY ARGOCD
+
+helm upgrade --install --wait --timeout 15m --atomic --namespace argocd --create-namespace \
+  --repo https://argoproj.github.io/argo-helm argocd argo-cd --values - <<EOF
+dex:
+  enabled: false
+redis:
+  enabled: true
+redis-ha:
+  enabled: false
+repoServer:
+  serviceAccount:
+    create: true
+server:
+  config:
+    resource.exclusions: |
+      - apiGroups:
+          - kyverno.io
+        kinds:
+          - AdmissionReport
+          - BackgroundScanReport
+          - ClusterAdmissionReport
+          - ClusterBackgroundScanReport
+        clusters:
+          - '*'
+    resource.compareoptions: |
+      ignoreAggregatedRoles: true
+      ignoreResourceStatusField: all
+    url: http://localhost/argocd
+    application.instanceLabelKey: argocd.argoproj.io/instance
+  extraArgs:
+    - --insecure
+    - --rootpath
+    - /argocd
+  ingress:
+    annotations:
+      kubernetes.io/ingress.class: nginx
+      cert-manager.io/cluster-issuer: ca-issuer
+    enabled: true
+    paths:
+      - /argocd
+EOF
diff --git a/scripts/labs/argocd/3-kube-prometheus-stack.sh b/scripts/labs/argocd/3-kube-prometheus-stack.sh
new file mode 100755
index 0000000000..677de34db9
--- /dev/null
+++ b/scripts/labs/argocd/3-kube-prometheus-stack.sh
@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+
+set -e
+
+# CREATE KUBE-PROMETHEUS-STACK APP
+
+kubectl apply -f - <<EOF
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: kube-prometheus-stack
+  namespace: argocd
+spec:
+  destination:
+    namespace: monitoring
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    chart: kube-prometheus-stack
+    repoURL: https://prometheus-community.github.io/helm-charts
+    targetRevision: 41.7.3
+    helm:
+      values: |
+        kubeEtcd:
+          service:
+            enabled: true
+            targetPort: 2381
+        defaultRules:
+          create: true
+        alertmanager:
+          alertmanagerSpec:
+            routePrefix: /alertmanager
+            alertmanagerConfigSelector:
+              matchLabels: {}
+            alertmanagerConfigNamespaceSelector:
+              matchLabels: {}
+          ingress:
+            enabled: true
+            pathType: Prefix
+        prometheus:
+          prometheusSpec:
+            externalUrl: /prometheus
+            routePrefix: /prometheus
+            ruleSelectorNilUsesHelmValues: false
+            serviceMonitorSelectorNilUsesHelmValues: false
+            podMonitorSelectorNilUsesHelmValues: false
+            probeSelectorNilUsesHelmValues: false
+          ingress:
+            enabled: true
+            pathType: Prefix
+        grafana:
+          enabled: true
+          adminPassword: admin
+          sidecar:
+            enableUniqueFilenames: true
+            dashboards:
+              enabled: true
+              searchNamespace: ALL
+              provider:
+                foldersFromFilesStructure: true
+            datasources:
+              enabled: true
+              searchNamespace: ALL
+          grafana.ini:
+            server:
+              root_url: "%(protocol)s://%(domain)s:%(http_port)s/grafana"
+              serve_from_sub_path: true
+          ingress:
+            enabled: true
+            path: /grafana
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true
+EOF
diff --git a/scripts/labs/argocd/4-loki.sh b/scripts/labs/argocd/4-loki.sh
new file mode 100755
index 0000000000..e05e376851
--- /dev/null
+++ b/scripts/labs/argocd/4-loki.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+set -e
+
+# CREATE LOKI APP
+
+kubectl apply -f - <<EOF
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: loki
+  namespace: argocd
+spec:
+  destination:
+    namespace: monitoring
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    chart: loki-stack
+    repoURL: https://grafana.github.io/helm-charts
+    targetRevision: 2.8.4
+    helm:
+      values: |
+        loki:
+          isDefault: false
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+EOF
diff --git a/scripts/labs/argocd/5-tempo.sh b/scripts/labs/argocd/5-tempo.sh
new file mode 100755
index 0000000000..ec4fc86289
--- /dev/null
+++ b/scripts/labs/argocd/5-tempo.sh
@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+
+set -e
+
+# CREATE TEMPO APP
+
+kubectl apply -f - <<EOF
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: tempo
+  namespace: argocd
+spec:
+  destination:
+    namespace: monitoring
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    chart: tempo
+    repoURL: https://grafana.github.io/helm-charts
+    targetRevision: 0.16.5
+    helm:
+      values: |
+        tempo:
+          searchEnabled: true
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+EOF
+
+kubectl create namespadce monitoring || true
+
+kubectl apply -f - <<EOF
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    grafana_datasource: "1"
+  name: tempo-datasource
+  namespace: monitoring
+data:
+  tempo-datasource.yaml: |-
+    apiVersion: 1
+    datasources:
+    - name: Tempo
+      type: tempo
+      access: proxy
+      url: "http://tempo.monitoring:3100"
+      version: 1
+      isDefault: false
+EOF
diff --git a/scripts/labs/argocd/6-metrics-server.sh b/scripts/labs/argocd/6-metrics-server.sh
new file mode 100755
index 0000000000..a87e91b46a
--- /dev/null
+++ b/scripts/labs/argocd/6-metrics-server.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+set -e
+
+# CREATE METRICS-SERVER APP
+
+kubectl apply -f - <<EOF
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: metrics-server
+  namespace: argocd
+spec:
+  destination:
+    namespace: kube-system
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    chart: metrics-server
+    repoURL: https://charts.bitnami.com/bitnami
+    targetRevision: 6.2.2
+    helm:
+      values: |
+        extraArgs:
+          - --kubelet-insecure-tls=true
+        apiService:
+          create: true
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+EOF
diff --git a/scripts/labs/argocd/7-kyverno.sh b/scripts/labs/argocd/7-kyverno.sh
new file mode 100755
index 0000000000..144092b631
--- /dev/null
+++ b/scripts/labs/argocd/7-kyverno.sh
@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+
+set -e
+
+# CREATE KYVERNO APP
+
+kubectl apply -f - <<EOF
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: kyverno
+  namespace: argocd
+spec:
+  destination:
+    namespace: kyverno
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    chart: kyverno
+    repoURL: https://kyverno.github.io/kyverno
+    targetRevision: 2.6.1
+    helm:
+      values: |
+        serviceMonitor:
+          enabled: true
+        initContainer:
+          extraArgs:
+            - --loggingFormat=json
+        extraArgs:
+          - --loggingFormat=json
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true
+EOF
diff --git a/scripts/labs/argocd/8-kyverno-policies.sh b/scripts/labs/argocd/8-kyverno-policies.sh
new file mode 100755
index 0000000000..d960c2ff10
--- /dev/null
+++ b/scripts/labs/argocd/8-kyverno-policies.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+set -e
+
+# CREATE KYVERNO-POLICIES APP
+
+kubectl apply -f - <<EOF
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: kyverno-policies
+  namespace: argocd
+spec:
+  destination:
+    namespace: kyverno
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    chart: kyverno-policies
+    repoURL: https://kyverno.github.io/kyverno
+    targetRevision: 2.6.1
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+EOF
diff --git a/scripts/labs/argocd/9-policy-reporter.sh b/scripts/labs/argocd/9-policy-reporter.sh
new file mode 100755
index 0000000000..084ff019be
--- /dev/null
+++ b/scripts/labs/argocd/9-policy-reporter.sh
@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+
+set -e
+
+# CREATE POLICY-REPORTER APP
+
+kubectl apply -f - <<EOF
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: policy-reporter
+  namespace: argocd
+spec:
+  destination:
+    namespace: kyverno
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    chart: policy-reporter
+    repoURL: https://kyverno.github.io/policy-reporter
+    targetRevision: 2.13.4
+    helm:
+      values: |
+        ui:
+          enabled: true
+          ingress:
+            annotations:
+              nginx.ingress.kubernetes.io/rewrite-target: \$1\$2
+              nginx.ingress.kubernetes.io/configuration-snippet: |
+                rewrite ^(/policy-reporter)$ \$1/ redirect;
+            enabled: true
+            hosts:
+              - host: ~
+                paths:
+                  - path: /policy-reporter(/|$)(.*)
+                    pathType: Prefix
+        kyvernoPlugin:
+          enabled: true
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+EOF
diff --git a/scripts/labs/argocd/common-steps.sh b/scripts/labs/argocd/common-steps.sh
new file mode 100755
index 0000000000..88e1cd194d
--- /dev/null
+++ b/scripts/labs/argocd/common-steps.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+set -e
+
+readonly SRC=$(dirname "$0")
+
+$SRC/0-cluster.sh
+$SRC/1-ingress-nginx.sh
+$SRC/2-argocd.sh
+$SRC/3-kube-prometheus-stack.sh
+$SRC/4-loki.sh
+$SRC/5-tempo.sh
diff --git a/scripts/labs/argocd/kind-argo.sh b/scripts/labs/argocd/kind-argo.sh
index 9871afabb5..23d8862d4f 100755
--- a/scripts/labs/argocd/kind-argo.sh
+++ b/scripts/labs/argocd/kind-argo.sh
@@ -2,369 +2,13 @@
 
 set -e
 
-# CONSTANTS
+readonly SRC=$(dirname "$0")
 
-readonly KIND_IMAGE=kindest/node:v1.24.4
-readonly NAME=argo
-
-# DELETE CLUSTER
-
-kind delete cluster --name $NAME || true
-
-# CREATE CLUSTER
-
-kind create cluster --name $NAME --image $KIND_IMAGE --config - <<EOF
-kind: Cluster
-apiVersion: kind.x-k8s.io/v1alpha4
-kubeadmConfigPatches:
-  - |-
-    kind: ClusterConfiguration
-    controllerManager:
-      extraArgs:
-        bind-address: 0.0.0.0
-    etcd:
-      local:
-        extraArgs:
-          listen-metrics-urls: http://0.0.0.0:2381
-    scheduler:
-      extraArgs:
-        bind-address: 0.0.0.0
-  - |-
-    kind: KubeProxyConfiguration
-    metricsBindAddress: 0.0.0.0
-nodes:
-  - role: control-plane
-    kubeadmConfigPatches:
-      - |-
-        kind: InitConfiguration
-        nodeRegistration:
-          kubeletExtraArgs:
-            node-labels: "ingress-ready=true"
-    extraPortMappings:
-      - containerPort: 80
-        hostPort: 80
-        protocol: TCP
-      - containerPort: 443
-        hostPort: 443
-        protocol: TCP
-  - role: worker
-  - role: worker
-  - role: worker
-EOF
-
-# DEPLOY INGRESS-NGINX
-
-kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
-
-sleep 15
-
-kubectl wait --namespace ingress-nginx \
-  --for=condition=ready pod \
-  --selector=app.kubernetes.io/component=controller \
-  --timeout=90s
-
-# DEPLOY ARGOCD
-
-helm upgrade --install --wait --timeout 15m --atomic --namespace argocd --create-namespace \
-  --repo https://argoproj.github.io/argo-helm argocd argo-cd --values - <<EOF
-dex:
-  enabled: false
-redis:
-  enabled: true
-redis-ha:
-  enabled: false
-repoServer:
-  serviceAccount:
-    create: true
-server:
-  config:
-    resource.exclusions: |
-      - apiGroups:
-          - kyverno.io
-        kinds:
-          - AdmissionReport
-          - BackgroundScanReport
-          - ClusterAdmissionReport
-          - ClusterBackgroundScanReport
-        clusters:
-          - '*'
-    resource.compareoptions: |
-      ignoreAggregatedRoles: true
-      ignoreResourceStatusField: all
-    url: http://localhost/argocd
-    application.instanceLabelKey: argocd.argoproj.io/instance
-  extraArgs:
-    - --insecure
-    - --rootpath
-    - /argocd
-  ingress:
-    annotations:
-      kubernetes.io/ingress.class: nginx
-      cert-manager.io/cluster-issuer: ca-issuer
-    enabled: true
-    paths:
-      - /argocd
-EOF
-
-# CREATE METRICS-SERVER APP
-
-kubectl apply -f - <<EOF
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: metrics-server
-  namespace: argocd
-spec:
-  destination:
-    namespace: kube-system
-    server: https://kubernetes.default.svc
-  project: default
-  source:
-    chart: metrics-server
-    repoURL: https://charts.bitnami.com/bitnami
-    targetRevision: 6.2.2
-    helm:
-      values: |
-        extraArgs:
-          - --kubelet-insecure-tls=true
-        apiService:
-          create: true
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-EOF
-
-# CREATE KUBE-PROMETHEUS-STACK APP
-
-kubectl apply -f - <<EOF
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: kube-prometheus-stack
-  namespace: argocd
-spec:
-  destination:
-    namespace: monitoring
-    server: https://kubernetes.default.svc
-  project: default
-  source:
-    chart: kube-prometheus-stack
-    repoURL: https://prometheus-community.github.io/helm-charts
-    targetRevision: 41.7.3
-    helm:
-      values: |
-        kubeEtcd:
-          service:
-            enabled: true
-            targetPort: 2381
-        defaultRules:
-          create: true
-        alertmanager:
-          alertmanagerSpec:
-            routePrefix: /alertmanager
-            alertmanagerConfigSelector:
-              matchLabels: {}
-            alertmanagerConfigNamespaceSelector:
-              matchLabels: {}
-          ingress:
-            enabled: true
-            pathType: Prefix
-        prometheus:
-          prometheusSpec:
-            externalUrl: /prometheus
-            routePrefix: /prometheus
-            ruleSelectorNilUsesHelmValues: false
-            serviceMonitorSelectorNilUsesHelmValues: false
-            podMonitorSelectorNilUsesHelmValues: false
-            probeSelectorNilUsesHelmValues: false
-          ingress:
-            enabled: true
-            pathType: Prefix
-        grafana:
-          enabled: true
-          adminPassword: admin
-          sidecar:
-            enableUniqueFilenames: true
-            dashboards:
-              enabled: true
-              searchNamespace: ALL
-              provider:
-                foldersFromFilesStructure: true
-            datasources:
-              enabled: true
-              searchNamespace: ALL
-          grafana.ini:
-            server:
-              root_url: "%(protocol)s://%(domain)s:%(http_port)s/grafana"
-              serve_from_sub_path: true
-          ingress:
-            enabled: true
-            path: /grafana
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-      - ServerSideApply=true
-EOF
-
-# CREATE LOKI APP
-
-kubectl apply -f - <<EOF
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: loki
-  namespace: argocd
-spec:
-  destination:
-    namespace: monitoring
-    server: https://kubernetes.default.svc
-  project: default
-  source:
-    chart: loki-stack
-    repoURL: https://grafana.github.io/helm-charts
-    targetRevision: 2.8.4
-    helm:
-      values: |
-        loki:
-          isDefault: false
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-EOF
-
-# CREATE TEMPO APP
-
-kubectl apply -f - <<EOF
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: tempo
-  namespace: argocd
-spec:
-  destination:
-    namespace: monitoring
-    server: https://kubernetes.default.svc
-  project: default
-  source:
-    chart: tempo
-    repoURL: https://grafana.github.io/helm-charts
-    targetRevision: 0.16.5
-    helm:
-      values: |
-        tempo:
-          searchEnabled: true
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-EOF
-
-# CREATE KYVERNO APP
-
-kubectl apply -f - <<EOF
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: kyverno
-  namespace: argocd
-spec:
-  destination:
-    namespace: kyverno
-    server: https://kubernetes.default.svc
-  project: default
-  source:
-    chart: kyverno
-    repoURL: https://kyverno.github.io/kyverno
-    targetRevision: 2.6.1
-    helm:
-      values: |
-        serviceMonitor:
-          enabled: true
-        initContainer:
-          extraArgs:
-            - --loggingFormat=json
-        extraArgs:
-          - --loggingFormat=json
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-      - ServerSideApply=true
-EOF
-
-# CREATE KYVERNO-POLICIES APP
-
-kubectl apply -f - <<EOF
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: kyverno-policies
-  namespace: argocd
-spec:
-  destination:
-    namespace: kyverno
-    server: https://kubernetes.default.svc
-  project: default
-  source:
-    chart: kyverno-policies
-    repoURL: https://kyverno.github.io/kyverno
-    targetRevision: 2.6.1
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-EOF
-
-# CREATE POLICY-REPORTER APP
-
-kubectl apply -f - <<EOF
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: policy-reporter
-  namespace: argocd
-spec:
-  destination:
-    namespace: kyverno
-    server: https://kubernetes.default.svc
-  project: default
-  source:
-    chart: policy-reporter
-    repoURL: https://kyverno.github.io/policy-reporter
-    targetRevision: 2.13.4
-    helm:
-      values: |
-        ui:
-          enabled: true
-          ingress:
-            annotations:
-              nginx.ingress.kubernetes.io/rewrite-target: \$1\$2
-              nginx.ingress.kubernetes.io/configuration-snippet: |
-                rewrite ^(/policy-reporter)$ \$1/ redirect;
-            enabled: true
-            hosts:
-              - host: ~
-                paths:
-                  - path: /policy-reporter(/|$)(.*)
-                    pathType: Prefix
-        kyvernoPlugin:
-          enabled: true
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-EOF
+$SRC/common-steps.sh
+$SRC/6-metrics-server.sh
+$SRC/7-kyverno.sh
+$SRC/8-kyverno-policies.sh
+$SRC/9-policy-reporter.sh
 
 echo "---------------------------------------------------------------------------------"
 
diff --git a/scripts/labs/argocd/minimal.sh b/scripts/labs/argocd/minimal.sh
new file mode 100755
index 0000000000..fc8e314eb3
--- /dev/null
+++ b/scripts/labs/argocd/minimal.sh
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+set -e
+
+readonly SRC=$(dirname "$0")
+
+$SRC/common-steps.sh
+
+echo "---------------------------------------------------------------------------------"
+
+ARGOCD_PASSWORD=$(kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d)
+
+echo "ARGOCD is running and available at            http://localhost/argocd"
+echo "- log in with admin / $ARGOCD_PASSWORD"
+echo "PROMETHEUS is running and available at        http://localhost/prometheus"
+echo "ALERTMANAGER is running and available at      http://localhost/alertmanager"
+echo "GRAFANA is running and available at           http://localhost/grafana"
+echo "- log in with admin / admin"