Connect a cluster

Connect your cluster with one Helm chart.

Install one connector per cluster. Every connection it opens is outbound. After that, anyone on your team can dispatch runs to it without a kubeconfig.

The problem

You already run Argo Workflows. Most of your team still cannot use it.

You run the cluster and you paid for the expertise. Using it means hand-writing Workflow YAML. That keeps it with the handful of people who can.

Dagweave lets your whole team build workflows. The connector dispatches them to the cluster you already paid for.

Enrolment

One connector per cluster

Dagweave generates the command, enrolment token included. The operator installs the chart once per cluster, then names each Argo Workflows instance the connector should manage.

Your cluster credentials stay in your cluster. Dagweave never holds a kubeconfig.
The connector opens every connection outbound. Nothing needs an inbound port.
Dagweave shows which Argo Workflows and Kubernetes versions each cluster runs, and warns you on the step if a setting won't work there.

High availability

Survives a node drain

It ships production-ready, and there is nothing to tune.

the chart's defaults, none of them yours to setyaml

replicaCount: 2
leaderElection:
  enabled: true            # one replica acts, the other waits
podDisruptionBudget:
  enabled: true            # a drain cannot take both at once
  maxUnavailable: 1
topologySpreadConstraints:
  enabled: true
  zone: true               # topology.kubernetes.io/zone
  hostname: true           # kubernetes.io/hostname
  whenUnsatisfiable: ScheduleAnyway
podAntiAffinity:
  enabled: true
  type: soft               # so one node can still schedule both

What lands in the cluster

The log collector

When a step fails, you want its log. The connector comes with a log collector. Point it at S3, or let Dagweave keep your logs, and each log shows up on its step.

Logs go to the console by default. Send them to your own S3, Loki or HTTP endpoint and Dagweave never sees them.
Or let Dagweave store them for you. With S3 or Dagweave, each log lands on the step that produced it.
The collector only reads pods Argo Workflows labelled, nothing else on the node.

Dispatch

Your workflows run on your cluster

The connector holds an outbound stream open. Dagweave sends the compiled manifest over it, your Argo Workflows instance runs the workflow, and status comes back on the same stream. Nothing runs in Dagweave.

Every dispatch is a fresh Workflow with its own generated name and Dagweave's ids on its pods.

enrol and dispatchtext

helm install  ->  operator enrols the connector, once
dispatch      ->  Workflow / WorkflowTemplate / CronWorkflow
report        ->  phase, per-step status, log refs, artifact URLs

Roles

Authors trigger runs without cluster access

The operator holds the cluster credentials and installs the connector. After that, the people who build workflows dispatch runs on a Dagweave permission alone.

No kubeconfig, no cluster RBAC.
The operator keeps control of what the connector can reach, in the cluster.
When a dispatch does not arrive, the connector's own logs are in Dagweave. No kubectl needed to find out why.

Connect the cluster you already have.

Dagweave is in early access. Leave an email and we will bring you on as we open it up.