Webhooks¶
v2.11 and after
Many clients can send events via the events API endpoint using a standard authorization header. However, for clients that are unable to do so (e.g. because they use signature verification as proof of origin), additional configuration is required.
In the namespace that will receive the event, create access token resources for your client:
- A role with permissions to get workflow templates and to create a workflow: example
- A service account for the client: example.
- A binding of the account to the role: example
Additionally create:
- A secret named
argo-workflows-webhook-clientslisting the service accounts: example
The secret argo-workflows-webhook-clients tells Argo:
- What type of webhook the account can be used for, e.g.
github. - What "secret" that webhook is configured for, e.g. in your Github settings page.