github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-13 10:21:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
7226b87a776cfd2d0154f8090aabc8fa39631715
awesome-kubernetes/v2-docs/gitops.md

49 KiB
Raw Blame History

GitOps

!!! info "Architectural Context" Detailed reference for GitOps in the context of Engineering Pipeline.

Standard Reference

Application Delivery

Continuous Deployment

Waypoint

  • (2026) waypointproject.io [HCL CONTENT] [COMMUNITY-TOOL] — HashiCorp Waypoint structures the application build, deploy, and release lifecycle using a unified declarative HCL workflow. While early versions operated as a lightweight standalone PaaS CLI, newer updates integrate it as a foundational deployment engine for internal developer platforms. Live grounding highlights its integration inside HashiCorp's expanded cloud control suites.

Helm

Alternative Engines

  • Nelm: A Helm Alternative for Kubernetes Deployments ⭐ 1072 [ADVANCED LEVEL] [ENTERPRISE-STABLE] — An innovative deployment engine integrated within the Werf workflow that functions as an alternative to native Helm release tracking. It resolves Helm's tracking limitations by ensuring strict live cluster validation and resource health monitoring.

Infrastructure as Code

Terraform Components

  • AWS EKS Argo CD Terraform Component [COMMUNITY-TOOL] — Curator Insight: Enterprise-ready Terraform submodule designed to deploy, configure, and bootstrap Argo CD onto an existing AWS EKS cluster. Live Grounding: Standardizes complex security configuration flags, integrates smoothly with AWS IAM roles for service accounts (IRSA), and provisions preconfigured Helm-based releases.

CI-CD

Continuous Delivery

Jenkins X

  • (2021) jenkins-x.io [GO CONTENT] [ADVANCED LEVEL] [LEGACY] — An open-source, cloud-native continuous delivery tool engineered specifically for Kubernetes environments. It orchestrates pipelines using Tekton and incorporates GitOps principles for environment promotion. Though highly influential, by 2026 it is largely considered a legacy project with declining community adoption relative to modern GitOps platforms.

Cloud Infrastructure

Kubernetes Distributions

Bare-Metal and Edge

  • (2026) Charmed Kubernetes [EN CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Canonical's model-driven Kubernetes distribution designed for bare-metal, private, and multi-cloud environments. Leverages Ubuntu's automated Juju framework to manage complex cluster lifecycles, upgrades, security scanning, and seamless hypervisor scaling.

Cloud Native Infrastructure

Service Mesh

Istio

Operations
  • (2021) solo.io: Navigating Istio Config: a look into Istio’s toolkit 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A guide detailing useful debugging utilities and CLI tools for validating and diagnosing Istio configuration sets. Explains how to leverage 'istioctl' diagnostics, debug configuration states, and inspect direct Envoy configuration mappings to maintain healthy cluster states.

Cloud-Native Development

Local Development Tools

Okteto

Enterprise Platform

GitOps and Configuration

ArgoCD and Tekton Pipelines

  • (2023) openshift.com: From Code to Production with GitOps, Tekton and ArgoCD 🌟 [YAML CONTENT] [ADVANCED LEVEL] [GUIDE] [COMMUNITY-TOOL] [GUIDE] — This architectural review details a continuous deployment pipeline using GitOps, Tekton, and Argo CD. Provides a blueprint for configuring enterprise-ready Kubernetes delivery systems designed to accelerate code-to-production lifecycles.

Config Sync

  • (2026) Config Sync [YAML CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Config Sync is a GitOps-native service for GKE and hybrid clouds that continually reconciles cluster state with a central repository. It supports hierarchical namespaces, multi-tenancy, and deep integration with GCP-native IAM and policy enforcement tools. Live grounding validates its position as a central tool within GKE Enterprise configurations.

Multi-Cluster Orchestration

Anthos

  • (2026) Anthos Config Management [YAML CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — The GKE Enterprise (formerly Anthos) documentation resource suite provides blueprints for managed enterprise Kubernetes topologies. It outlines complex control plane federations, hybrid cloud service meshes, and identity integrations. The modern 2026 platform architecture emphasizes unified control over distributed on-premise and public cloud clusters.

Enterprise Platforms

OpenShift Integration

GitOps Tools

  • (2021) openshift.com: Announcing OpenShift GitOps [COMMUNITY-TOOL] — Announces OpenShift GitOps, an out-of-the-box framework integrating Argo CD into OpenShift clusters. It provides platform engineers with declarative configuration tools to manage cluster states and deploy multi-tenant application workloads.
  • (2021) openshift.com: OpenShift Pipelines and OpenShift GitOps are now Generally Available 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — Highlights the General Availability of OpenShift Pipelines and OpenShift GitOps. Built on Tekton and Argo CD, this combination provides an integrated, cloud-native delivery pipeline for building and deploying microservices securely on OpenShift.

GitOps (1)

Automation Workflows

CICD Integration

  • (2022) containerjournal.com: Best of 2022: GitOps: The Missing Link for CI/CD for Kubernetes [COMMUNITY-TOOL] — An industry report analyzing why GitOps is the preferred continuous delivery pattern for Kubernetes workloads. Shows how separating CI build stages from CD pull reconciliation loops improves security and system stability.
  • (2021) jimangel.io: Self-Updating GitOps [ADVANCED LEVEL] [COMMUNITY-TOOL] — A step-by-step guide to setting up self-updating GitOps loops. Demonstrates how to design automated CI/CD pipelines that update container tag values in Git repositories, closing the continuous integration loop without manual drift.

Repository Layouts

Tool Comparison

Continuous Delivery (1)

Argo CD

Developer Platform

Application Delivery (1)

  • (2021) shipa.io: GitOps meets AppOps [COMMUNITY-TOOL] — Proposes the concept of 'AppOps' as a way to simplify application management on top of GitOps engines. Highlights abstracting raw Kubernetes configurations from developers, allowing them to define service parameters while platform engineers run GitOps loops.

Developer Tools

Git Basics

Enterprise Delivery

Application Platforms

  • (2021) shipa.io: GitOps in the enterprise 🌟 [CASE STUDY] [COMMUNITY-TOOL] — Addresses the real-world complexities of running GitOps inside multi-tenant, enterprise business environments. Explores security boundaries, handling raw Kubernetes YAML bloat, and simplifying developer delivery workflows using abstractions.

Architecture Rules

Implementation Patterns

Multi-Infrastructure

Strategy Planning

Hybrid Cloud Platforms

Azure Arc Integration

  • (2021) Kubernetes GitOps with Azure Arc and Charmed Kubernetes [EN CONTENT] [COMMUNITY-TOOL] [GUIDE] — A technical guide illustrating the integration of Charmed Kubernetes with Azure Arc to orchestrate hybrid-cloud resources. Demonstrates how GitOps configurations are pushed dynamically across decentralized architectures using unified portal controls.

Kubernetes Packaging

Configuration Management

Methodology and Principles

Best Practices

Community Trends

Culture and Strategy

Declarative Infrastructure

  • (2021) openshift.com: What is GitOps? 🌟 [COMMUNITY-TOOL] [GUIDE] — A foundational guide outlining the main tenets of GitOps as defined by the OpenGitOps working group. Covers declarative state models, pull-based agents, versioned source control, and automated reconciliation loops.

DevOps Evolution

Enterprise Delivery (1)

  • (2021) github.blog: Applying GitOps principles to your operations [COMMUNITY-TOOL] — A GitHub technical blueprint detailing how to apply version-controlled GitOps patterns to enterprise operations. Recommends workflows utilizing GitHub Actions, PR code reviews, and policy checks to control cluster states.

Kubernetes Native

  • (2021) containerjournal.com: GitOps Workflows and Principles for Kubernetes [COMMUNITY-TOOL] — Analyzes the close architectural relationship between GitOps patterns and Kubernetes design principles. Discusses the continuous reconciliation loop, custom resource management, and state resolution engines.
  • (2021) loft.sh: GitOps + Kubernetes Explained [COMMUNITY-TOOL] [GUIDE] — Explains the mechanics of GitOps on Kubernetes, showing how reconciliation loops match target clusters to source repositories. Also covers isolating multi-tenant workloads using virtual clusters (vclusters) alongside GitOps tools.

Maturity Models

  • (2021) containerjournal.com: The 4 Levels of GitOps Maturity [COMMUNITY-TOOL] — Explains the four evolutionary levels of GitOps adoption. Outlines transition stages from simple code tracking in Git to fully automated multi-cluster reconciliation, continuous policy compliance, and self-healing.

Visual Explanations

  • (2021) redhat.com: An illustrated guide to GitOps [COMMUNITY-TOOL] [GUIDE] — An illustrated technical guide demonstrating GitOps continuous integration and continuous delivery patterns. It provides clear visual explanations of push-based vs. pull-based architectures and the role of kubernetes operators.

Release Engineering

Environment Promotion

Infrastructure

GitOps (2)

Cluster Provisioning

  • Weave Kubernetes System Control - wksctl ⭐ 389 [ADVANCED LEVEL] [LEGACY] — An early GitOps-driven Kubernetes cluster manager from Weaveworks that provisioned clusters from a declared state stored in git. Following Weaveworks' operational shutdown, this project is considered legacy but remains highly influential in GitOps control-loop architecture history.
  • WKSctl: a Tool for Kubernetes Cluster Management Using GitOps [COMMUNITY-TOOL] — An InfoQ editorial piece analyzing the operational design of WKSctl. Explores how declarative machine and cluster definitions allowed users to bootstrap and reconcile nodes over SSH using Git as the source of truth.

Networking

Container Network Interface

CNI Plugins

  • github: Weave Net - Weaving Containers into Applications ⭐ 6613 [EN CONTENT] [ADVANCED LEVEL] [ENTERPRISE-STABLE] [LEGACY] — Weave Net is a resilient container CNI designed to create peer-to-peer overlay networks without external databases or configurations. The project was officially archived by Weaveworks in 2024, prompting teams to migrate to more modern CNI plugins like Cilium and Calico.

Platform Engineering

CI-CD Security

Cloud Identity

  • Avoiding Mistakes with AWS OIDC Integration Conditions [ADVANCED LEVEL] [DE FACTO STANDARD] — An in-depth security analysis detailing how to configure AWS OpenID Connect (OIDC) trust relationships correctly in GitHub Actions and other CI providers. Highlights major vulnerabilities arising from missing subject (sub) or audience (aud) validation and shows how to restrict access patterns safely.

💡 Explore Related: Jenkins Alternatives | Registries | CI/CD

Reference in New Issue View Git Blame Copy Permalink