mirror of
https://github.com/nubenetes/awesome-kubernetes.git
synced 2026-07-13 18:30:44 +00:00
42 KiB
42 KiB
Argo Declarative GitOps for Kubernetes
!!! info "Architectural Context" Detailed reference for Argo Declarative GitOps for Kubernetes in the context of Engineering Pipeline.
Standard Reference
- medium: Argo CD: A Tool for Kubernetes DevOps [COMMUNITY-TOOL]
- wecloudpro.com: Deploying Helm Charts with ArgoCD [COMMUNITY-TOOL]
- medium.com/gumgum-tech: Streamlining your Kubernetes adoption with Helmfile' / ArgoCD and GitOps [COMMUNITY-TOOL]
- levelup.gitconnected.com: Getting Started With ArgoCD on your Kubernetes' Cluster [COMMUNITY-TOOL]
- igboie.medium.com: Kubernetes CI/CD with GitHub, GitHub Actions and Argo' CD [COMMUNITY-TOOL]
- medium.com/containers-101: Using GitOps, Multiple Argo Instances, and Environments' with Argo CD at Scale [COMMUNITY-TOOL]
- medium.com/@ScrumPokerPro: Cloud native architecture with Kubernetes and' ArgoCD [COMMUNITY-TOOL]
- faun.pub: Deploying Argo CD and Sealed Secrets with Helm [COMMUNITY-TOOL]
- amralaayassen.medium.com: How to create ArgoCD Applications Automatically' using ApplicationSet? “Automation of GitOps” [COMMUNITY-TOOL]
- blog.akuity.io: Unveil the Secret Ingredients of Continuous Delivery at' Enterprise Scale with Argo CD [COMMUNITY-TOOL]
- prashant-48386.medium.com: Continuous Delivery for Kubernetes With Argo' CD [COMMUNITY-TOOL]
- medium.com/@outlier.developer: Getting Started with ArgoCD for GitOps Kubernetes' Deployments [COMMUNITY-TOOL]
- medium.com/@hmquan08011996: Setup Microservices on Kubernetes — Automating' Kubernetes with ArgoCD [COMMUNITY-TOOL]
- kamsjec.medium.com: ArgoCD Setup on Kubernetes/OpenShift Cluster [COMMUNITY-TOOL]
- medium.com/@versentfastforward: GitOps on Kubernetes with ArgoCD [COMMUNITY-TOOL]
- medium.com/@versentfastforward: One-click Bootstrap Deployment of ArgoCD [COMMUNITY-TOOL]
- medium.com/@versentfastforward: Structuring Your Repo for ArgoCD, Part 1 [COMMUNITY-TOOL]
- faun.pub: Continuous Deployments of Kubernetes Applications using Argo CD' GitOps & Helm Charts [COMMUNITY-TOOL]
- jamalshahverdiev.medium.com: ArgoCD ApplicationSet with Applications, Image' Updater and Notification controller with SSO [COMMUNITY-TOOL]
- faun.pub: Hygiene of an ArgoCD-built automation at a scale [COMMUNITY-TOOL]
- blog.devgenius.io: Argo CD Introduction [COMMUNITY-TOOL]
- figments.medium.com: ArgoCD: The first step towards GitOps [COMMUNITY-TOOL]
- medium.com/@nsfabrice2009: How to install ArgoCD on k8s cluster [COMMUNITY-TOOL]
- medium.com/containers-101: How to Install and Upgrade Argo CD [COMMUNITY-TOOL]
- medium.com/containers-101: Argo CD Best Practices [COMMUNITY-TOOL]
- gokhan-karadas1992.medium.com: ArgoCD + Kubevela Integration [COMMUNITY-TOOL]
- blog.tanmaysarkar.tech: Beginners Guide to Argo CD [COMMUNITY-TOOL]
- medium.com/devops-techable: GitOps with ArgoCD running in Kubernetes for' deployment processing [COMMUNITY-TOOL]
- medium.com/@eduard.mihai.lemnaru: Auto-update helm chart version using ArgoCD [COMMUNITY-TOOL]
- 53jk1.medium.com: ArgoCD: The Continuous Delivery Solution for Kubernetes [COMMUNITY-TOOL]
- medium.com/@jon.mclean: ArgoCD: The GitOps Way [COMMUNITY-TOOL]
- medium.com/@devopsrockers: Blue-Green Deployment on EKS using Argocd with' Kubecost, Istio, External DNS, Grafana-Prometheus and More: “Build, Deploy a Resilient and Observability-Driven Application” [COMMUNITY-TOOL]
- medium.com/@samuelbagattin: Partial Helm values encryption using AWS KMS' with ArgoCD [COMMUNITY-TOOL]
- blog.devops.dev: GitOps at Scale [COMMUNITY-TOOL]
- medium.com/@jerome.decoster: Create temporary environment from Pull Request' with ArgoCD ApplicationSet [COMMUNITY-TOOL]
- medium.com/@geoffrey.muselli: ArgoCD: Multi-cluster Helm charts management' in mono-repo [COMMUNITY-TOOL]
- medium.com/otomi-platform: Helmfile and ArgoCD are better together [COMMUNITY-TOOL]
- overcast.blog: GitOps with ArgoCD for Kubernetes [COMMUNITY-TOOL]
- medium.com/globant: Using multiple sources for a Helm Chart deployment in' ArgoCD [COMMUNITY-TOOL]
- faun.pub: ArgoCD Finalizer Shield: Protecting Your Production Clusters from' Unintended Deletion [COMMUNITY-TOOL]
- overcast.blog: Kubernetes — ArgoCD — Gitlab Webhook Configuration [COMMUNITY-TOOL]
- dnastacio.medium.com: Six critical blindspots while securing Argo CD [COMMUNITY-TOOL]
- jijujacob27.medium.com: Sharded applications on Kubernetes using Helm, ArgoCD,' and Argo-Rollouts [COMMUNITY-TOOL]
- medium.com/@ej.sta.ana: Easy Blue-Green Deployment on Openshift Container' Platform using Argo Rollouts [COMMUNITY-TOOL]
- medium.com/everything-full-stack: Deployment Strategies: Argo Rollouts [COMMUNITY-TOOL]
- faun.pub: Kubernetes Practice — Automating Blue/Green Deployment with Argo' Rollouts [COMMUNITY-TOOL]
- faun.pub: How Helm Subcharts Make the Transition to Argo Rollouts a Breeze [COMMUNITY-TOOL]
- medium.com/atlantbh: Implementing CI/CD pipeline using Argo Workflows and' Argo Events 🌟 [COMMUNITY-TOOL]
Cloud Native
Orchestration
Argo Workflows
Reliability
- (2023) blog.argoproj.io: Architecting Workflows For Reliability [YAML CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Outlines reliable architectural patterns for running large-scale Argo Workflows. Covers retry policies, rate-limiting configurations, and workflow controller adjustments necessary to safely sustain highly concurrent executions without experiencing system degradation.
Security
- (2023) blog.argoproj.io: Practical Argo Workflows Hardening 🌟 [YAML CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — A practical guide to security hardening for Argo Workflows deployments in enterprise environments. Focuses on minimizing RBAC permissions, configuring network policies, securing the workflow controller, and utilizing read-only file systems to mitigate risks of privilege escalation and container breakouts.
Templates
- (2023) dev.to: The three meanings of "template" in Argo Workflows [YAML CONTENT] [COMMUNITY-TOOL] — Synthesizes the semantic differences and runtime boundaries between the three distinct definitions of 'template' in Argo Workflows. Distinguishes template definitions, invocations, and inline declarations within a workflow manifest, preventing common YAML structure misconfigurations in complex pipelines.
GitOps and CD
Argo Project Ecosystem
- (2021) devops.com: The Argo Project: Making GitOps Practical 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Investigates the rapid industry adoption of the Argo ecosystem (Argo CD, Workflows, Rollouts, Events). Explains how the projects solve operational gaps in native Kubernetes, making declarative continuous delivery robust and enterprise-ready.
Argo Rollouts
Blue-Green Deployment
- (2022) infracloud.io: Progressive Delivery with Argo Rollouts : Blue-Green Deployment 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Guides engineers through setting up a complete Blue-Green deployment workflow with Argo Rollouts. Outlines routing controls, active/preview service handoffs, and visual UI verification configurations.
Canary Deployment
- (2022) infracloud.io: Progressive Delivery with Argo Rollouts: Canary Deployment [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Offers a practical exploration of canary rollouts configured via Argo Rollouts. Focuses on setting step-based traffic splitting, managing dynamic service mesh weights (SMI, Linkerd, Istio), and defining automated rollbacks based on analysis metrics.
Configuration Management
- (2022) codefresh.io: Progressive delivery for Kubernetes Config Maps using Argo Rollouts [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Solves the tricky challenge of managing and rolling out application configuration updates dynamically. Demonstrates how to trigger controlled, safe progressive delivery cycles for applications when only ConfigMaps or Secrets are modified.
Progressive Delivery
- (2023) ==argoproj.github.io: Argo Rollouts - Kubernetes Progressive Delivery Controller== [ADVANCED LEVEL] [DOCUMENTATION] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Introduces the core concepts of Argo Rollouts, which replaces standard Kubernetes Deployment objects with custom Rollout resources. Enables automatic analysis, metrics integration (Prometheus, Datadog), and automated rollback strategies.
Argo Workflows (1)
Release News
- (2022) blog.argoproj.io: What’s new in Argo Workflows v3.3 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Highlights the key feature additions, execution optimizations, and performance enhancements introduced in Argo Workflows version 3.3. Discusses UI/UX developments, DAG scaling capabilities, and robust security upgrades.
ArgoCD
ApplicationSets
- (2023) ==argoproj-labs/applicationset: Argo CD ApplicationSet Controller== ⭐ 582 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The standard orchestrator extending Argo CD to support multi-cluster application distribution templates. Processes multi-source configurations, automates environment scaling, and drastically reduces the maintenance overhead of managing distinct Application manifests.
- (2024) developers.redhat.com: Enhance Kubernetes deployment efficiency with Argo CD and ApplicationSet [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Deep technical review of optimization practices when deploying large-scale software footprints using ApplicationSets. Outlines how to maximize rendering efficiency, prevent performance bottlenecks, and design clean matrix-based generators.
Authentication and SSO
GitHub Integration
- (2021) cloud.redhat.com: How to Use ArgoCD Deployments with GitHub Tokens 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Explains how to securely integrate ArgoCD with private GitHub repositories using Personal Access Tokens (PATs) and fine-grained permissions. Addresses secure secret management inside Kubernetes to safeguard credentials used during the repository fetching phase.
Best Practices
- (2022) datree.io: ArgoCD Best Practices You Should Know 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Expands on essential ArgoCD best practices, emphasizing the isolation of Git repositories for source code and Kubernetes manifests, configuring auto-prune, and defining declarative sync policies to maintain platform stability.
Bootstrap Automation
Autopilot
- (2023) ==argoproj-labs/argocd-autopilot: Argo-CD Autopilot== ⭐ 1121 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An official Argo project opinionated tool designed to structure, install, and update Argo CD setups automatically. Uses a clean directory structure separating infrastructure from application manifests, enabling rapid multi-project bootstrap with version tracking and disaster recovery features.
Concepts and Practices
- (2022) thenewstack.io: Applied GitOps with ArgoCD 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A comprehensive examination of GitOps workflows operationalized via ArgoCD. Highlights key practices such as declarative environment definition, pull-based synchronization, and automated drift detection to maintain cluster state parity.
- (2022) thenewstack.io: Why ArgoCD Is the Lifeline of GitOps 🌟🌟🌟 [COMMUNITY-TOOL] — Evaluates the architectural superiority of ArgoCD as a pull-based GitOps operator. Focuses on its continuous reconciliation loop, granular cluster state visualization, and out-of-the-box self-healing capabilities that minimize human intervention.
- (2021) blog.risingstack.com: Argo CD Kubernetes Tutorial 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A structured starter guide covering ArgoCD installation, repository connection, and application deployment. Outlines core synchronization paradigms and provides a practical walkthrough of transitioning standard manifests to GitOps.
- (2021) blog.getambassador.io: GitOps in Kubernetes with ArgoCD 🌟🌟🌟 [COMMUNITY-TOOL] — Describes the conceptual pillars of GitOps and details how ArgoCD implements them on Kubernetes. Explains key mechanisms such as out-of-sync alert signaling, dry-run synchronization, and visual drift visualization.
Introduction
- (2022) kubebyexample.com: Argo CD Overview 🌟 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A foundational educational overview of the ArgoCD engine, architecture, and UI dashboard. Introduces the concepts of Target State versus Live State, and details the controller-to-API communication model.
Multi-Cluster
ApplicationSets (1)
- (2022) openshift.com: Getting Started with ApplicationSets 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Deep dive into the ArgoCD ApplicationSet controller, explaining how to model and automate multi-cluster and multi-tenant application deployments. Covers generators like List, Directory, and Git to scale configurations with minimal templating boilerplate.
- (2022) piotrminkowski.com: Manage Multiple Kubernetes Clusters with ArgoCD 🌟 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Step-by-step architectural guide on configuring a centralized ArgoCD instance to manage resources across several remote Kubernetes clusters. Covers network endpoints, remote credentials provisioning, and configuration drift auditing.
Patterns
App-of-Apps
- (2021) opensource.com: Automatically create multiple applications in Argo CD 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Demonstrates how to leverage the 'App-of-Apps' pattern in ArgoCD to construct recursive, nested application structures. Enables engineers to automate the bootstrapping of complex multi-tier platforms from a single root configuration.
Plugins and Extensions
- (2023) github.com/crumbhole/argocd-lovely-plugin: argocd-lovely-plugin ⭐ 486 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A flexible Custom Config Management Plugin (CMP) for Argo CD designed to combine Helm, Kustomize, and raw YAML. It solves the nested tooling dilemma by processing multiple template layers without requiring complex shell scripts, simplifying enterprise GitOps chains.
Synchronization Strategies
- (2022) blog.argoproj.io: New sync and diff strategies in ArgoCD [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Explores performance optimizations and enhanced reconciliation engines introduced in ArgoCD. Details advanced diff options, custom synchronization hooks, and resource tracking methods that streamline deployment workflows in large-scale environments.
Tutorials
- (2022) digitalocean.com: How to Deploy to Kubernetes using Argo CD and GitOps 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A practical implementation guide showcasing the deployment of containerized workloads onto DigitalOcean Kubernetes (DOKS) using ArgoCD. Establishes a complete declarative delivery pipeline driven by version-controlled manifests.
Workload Management
Demos
- (2023) github.com/myspotontheweb/gitops-workloads-demo [YAML CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — Comprehensive demo repository showcasing real-world GitOps workload configurations. Provides a structural blueprint for multi-tenant environments, detailing how to cleanly decouple cluster-wide infrastructure configurations from individual application manifests.
CICD Integration
- (2023) dev.to: Extending GitOps: Effortless continuous integration and deployment on Kubernetes 🌟🌟🌟 [COMMUNITY-TOOL] — Explores architectural models for bridging continuous integration (CI) platforms with GitOps-driven deployment mechanisms. Emphasizes clean decoupling where CI updates target config states while Kubernetes reconcile loops execute the rollout.
Tool Comparison
ArgoCD vs FluxCD
- (2022) thenewstack.io: GitOps on Kubernetes: Deciding Between Argo CD and Flux 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Evaluates the architectural differences, strengths, and trade-offs of the two dominant GitOps controllers: ArgoCD and FluxCD. Compares ArgoCD's powerful web UI and multi-tenancy model against Flux's lightweight, decentralized, and Kubernetes-native approach.
Kubernetes GitOps and Packaging
Argo Project Ecosystem (1)
Event-Driven Automation
- (2026) argoproj.github.io: Argo Events - The Event-driven Workflow Automation Framework [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — The standard event-driven orchestration engine for Kubernetes. Argo Events integrates with sources like webhooks, S3, or pub-sub, dynamically executing serverless triggers, custom scripts, and Argo Workflows with native scalability.
GitOps Strategy
- (2026) argoproj.github.io: Argo CD - Declarative GitOps for Kubernetes [GO CONTENT] [COMMUNITY-TOOL] — The absolute industry standard for GitOps-based continuous delivery on Kubernetes. Argo CD synchronizes active cluster states with declarative configurations stored in git repositories, providing robust drift correction, visual dashboarding, and audit controls.
- (2022) Why and when do you need Argo CD? [N/A CONTENT] [COMMUNITY-TOOL] — An executive guide explaining the core capabilities of GitOps and the necessity of declarative pull engines like Argo CD. It details drift management, configuration alignment, and security advantages compared to manual push deployments.
UI Visualization
- (2024) ==feat(ui): Add AppSet to Application Resource Tree in Argo CD== ⭐ 23128 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The official Argo CD feature enhancement that maps ApplicationSets directly inside the dashboard UI tree. This view simplifies managing multi-tenant topologies and nested application definitions for platform operators.
Video Guides
- (2022) youtube: GitOps with Argo-CD & Kubernetes [N/A CONTENT] [COMMUNITY-TOOL] [GUIDE] — An introductory video guide showing how to configure and run continuous deployment pipelines using Argo CD and Kubernetes. It walks through initial repository setups, synchronization configurations, and basic troubleshooting procedures.
Platform Engineering
ArgoCD (1)
Internal Developer Platforms
- (2023) itnext.io: Build a Lightweight Internal Developer Platform with Argo CD and Kubernetes Labels [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Demonstrates how to design a lightweight, self-service Internal Developer Platform (IDP) by leveraging Kubernetes metadata labels, admission webhooks, and ArgoCD's API to dynamically generate applications.
Security and Compliance
RBAC
- (2021) itnext.io: ArgoCD: users, access, and RBAC 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Details the configuration of user management, local accounts, and role-based access control (RBAC) in ArgoCD. Guides platform engineers through restricting access to specific applications, projects, or clusters using fine-grained policies.
GitOps
AWS EKS
Tekton
- (2022) ==aws.amazon.com: Cloud Native CI/CD with Tekton and ArgoCD on AWS== [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Discusses designing an end-to-end, Kubernetes-native CI/CD pipeline on AWS EKS. Uses Tekton for building and containerizing microservices, seamlessly handing off the deployment phase to ArgoCD for pull-based application delivery.
ArgoCD (2)
Architecture Topologies
- (2022) ==akuity.io: How many do you need? - Argo CD Architectures Explained== [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Evaluates different topology designs for ArgoCD deployments in large organizations. Details the trade-offs between a single centralized Hub-and-Spoke cluster controller versus multiple decentralized Argo instances scattered across target clusters.
Terraform Integration
- (2022) seraf.dev: ArgoCD Tutorial — (with Terraform) 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Guides engineers on bootstrapping an entire ArgoCD installation, including repositories, projects, and application instances, declaratively via the official HashiCorp Terraform provider for ArgoCD.
Authentication and SSO (1)
OpenShift
- (2022) openshift.com: OpenShift Authentication Integration with ArgoCD 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Analyzes the integration of OpenShift's native OAuth server with ArgoCD. Explains how to map OpenShift user groups to ArgoCD RBAC roles, establishing a secure, unified single sign-on (SSO) experience for enterprise platforms.
GitHub Actions
AWS EKS (1)
- (2023) dev.to/devsatasurion: Deploying Applications with GitHub Actions and ArgoCD to EKS: Best Practices and Techniques 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — A detailed configuration recipe detailing how to orchestrate deployments to AWS EKS using GitHub Actions as the CI pipeline and ArgoCD as the GitOps agent. Includes IAM role assumptions, token handling, and multi-environment promotions.
Kubernetes Operators
CRD Lifecycle
- (2023) piotrminkowski.com: Manage Kubernetes Operators with ArgoCD [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Addresses challenges and patterns for deploying Kubernetes Operators (e.g., Prometheus Operator, Cert-Manager) via ArgoCD. Analyzes solutions for Custom Resource Definition (CRD) lifecycle management during upgrades and synchronization.
Multi-Tenancy
Security and Compliance (1)
- (2021) ==blog.argoproj.io: Best Practices for Multi-tenancy in Argo CD== [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Outlines critical architectural patterns for implementing multi-tenancy in ArgoCD. Covers AppProjects boundaries, target namespace isolation, network policies, and cluster-wide RBAC to ensure secure sharing of GitOps infrastructure.
Terraform Integration (1)
Data Infrastructure
- (2022) piotrminkowski.com: Manage Kubernetes Cluster with Terraform and Argo CD. Create Kakfa Cluster using GitOps 🌟 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Practical demonstration of deploying and managing a Kafka cluster on Kubernetes using a hybrid Terraform and ArgoCD approach. Discusses how to configure infrastructure dependencies with Terraform and declare workload states inside GitOps.
Infrastructure as Code
Modular Architecture
- (2022) dev.to: Towards a Modular DevOps Stack 🌟🌟🌟 [COMMUNITY-TOOL] — Proposes a blueprint for building modular, maintainable DevOps platforms. Focuses on orchestrating infrastructure provisioners, secret engines, and GitOps engines under unified declarative frameworks to minimize vendor lock-in.
Terraform and AWS
EKS Modules
- (2023) AWS EKS Argo CD Terraform Component [HCL CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Enterprise-ready Terraform submodule designed to deploy, configure, and bootstrap Argo CD onto an existing AWS EKS cluster. Standardizes complex security configurations, integrates with IAM Roles for Service Accounts (IRSA), and provisions preconfigured Helm releases.
Progressive Delivery (1)
DNS Routing
Blue-Green Deployment (1)
- (2022) infracloud.io: How to Setup Blue Green Deployments with DNS Routing 🌟 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Examines advanced architectural design patterns using DNS-based routing to switch traffic for Blue-Green deployments. Discusses how to coordinate external load balancers and global DNS systems during the migration window.
Secret Management
HashiCorp Vault
ArgoCD Plugins
- (2023) ==argoproj-labs/argocd-vault-plugin== ⭐ 967 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An indispensable Argo CD plugin built to inject secrets dynamically from HashiCorp Vault, AWS Secrets Manager, or GCP Secret Manager. Replaces custom templating hacks by decrypting and injecting secret values directly into workloads at synchronization time, ensuring zero plaintext secrets enter the Git repository.
- (2022) github.com/crumbhole/argocd-vault-replacer ⭐ 109 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — A specialized replacement utility designed to pull secrets from HashiCorp Vault during the Argo CD rendering phase. Acts as a lightweight precursor/alternative to full plugin integrations, enabling targeted placeholder substitutions within native Kubernetes manifest streams.
Sealed Secrets
ArgoCD (3)
- (2021) dev.to: Argo CD and Sealed Secrets is a perfect match 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Illustrates the architecture of deploying Bitnami Sealed Secrets alongside ArgoCD. Solves the core GitOps paradox by allowing users to safely commit encrypted secrets to Git, which are then decrypted inside the cluster by the controller.
Security and Compliance (2)
Vulnerabilities and CVEs
ArgoCD Security
Remediation
- (2022) infoworld.com: How to protect your Kubernetes infrastructure from the Argo CD vulnerability 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Provides concrete mitigation, scanning, and patching guidelines in the wake of CVE-2022-24348. Demonstrates strategies for minimizing risks in ArgoCD, including least-privilege service account configurations and network boundaries.
- (2022) armosec.io: CVE 2022-24348 – Argo CD High Severity Vulnerability and its impact on Kubernetes [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Highly detailed technical breakdown of CVE-2022-24348, analyzing how Helm/Kustomize relative path resolution was bypassed. Outlines step-by-step remediation plans and security control recommendations to protect clusters.
- (2022) threatpost.com: Argo CD Security Bug Opens Kubernetes Cloud Apps to Attackers 🌟🌟🌟 [COMMUNITY-TOOL] — News coverage of a severe vulnerability affecting ArgoCD. Explains how the path traversal flaw (CVE-2022-24348) allowed malicious manifests to pull sensitive secrets and files from the GitOps control plane cluster.
- (2022) thehackernews.com: New Argo CD Bug Could Let Hackers Steal Secret Info from Kubernetes Apps 🌟🌟🌟 [COMMUNITY-TOOL] — Explains how security researchers identified a critical path-traversal bug (CVE-2022-24348) within the ArgoCD repository-reconciliation component. Evaluates the potential risk exposure of configuration data and key material.
- (2022) securityaffairs.co: Argo CD flaw could allow stealing sensitive data from Kubernetes Apps 🌟🌟🌟 [COMMUNITY-TOOL] — Highlights the threat landscape exposed by vulnerability CVE-2022-24348 in multi-tenant environments. Emphasizes why prompt patching of GitOps controllers is critical when handling multi-tenant repositories on shared control planes.
💡 Explore Related: Jenkins | Openshift Pipelines | Flux