Files
awesome-kubernetes/v2-docs/argo.md

59 KiB
Raw Blame History

Argo Declarative GitOps for Kubernetes

!!! info "Architectural Context" Detailed reference for Argo Declarative GitOps for Kubernetes in the context of Engineering Pipeline.

Table of Contents

  1. Architectural Foundations
  1. Cloud Native
  1. GitOps and CD
  1. Kubernetes GitOps and Packaging
  1. Platform Engineering
  1. Security and Compliance

Architectural Foundations

Kubernetes Tools

General Reference

Cloud Native

Community

Events

ArgoCon
  • (2026) ArgoCon North America 2026 Call for Proposals [COMMUNITY-TOOL] — Official Call for Proposals portal for ArgoCon North America 2026. Focuses on collecting real-world architectures, case studies, and enterprise patterns utilizing Argo CD, Argo Workflows, Argo Rollouts, and Argo Events.

Orchestration

Argo Workflows

Reliability
  • (2023) blog.argoproj.io: Architecting Workflows For Reliability [YAML CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Outlines reliable architectural patterns for running large-scale Argo Workflows. Covers retry policies, rate-limiting configurations, and workflow controller adjustments necessary to safely sustain highly concurrent executions without experiencing system degradation.
Security
  • (2023) blog.argoproj.io: Practical Argo Workflows Hardening 🌟 [YAML CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — A practical guide to security hardening for Argo Workflows deployments in enterprise environments. Focuses on minimizing RBAC permissions, configuring network policies, securing the workflow controller, and utilizing read-only file systems to mitigate risks of privilege escalation and container breakouts.
Templates
  • (2023) dev.to: The three meanings of "template" in Argo Workflows [YAML CONTENT] [COMMUNITY-TOOL] — Synthesizes the semantic differences and runtime boundaries between the three distinct definitions of 'template' in Argo Workflows. Distinguishes template definitions, invocations, and inline declarations within a workflow manifest, preventing common YAML structure misconfigurations in complex pipelines.

GitOps and CD

Argo Project Ecosystem

  • (2021) devops.com: The Argo Project: Making GitOps Practical 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Investigates the rapid industry adoption of the Argo ecosystem (Argo CD, Workflows, Rollouts, Events). Explains how the projects solve operational gaps in native Kubernetes, making declarative continuous delivery robust and enterprise-ready.

Argo Rollouts

Blue-Green Deployment

Canary Deployment

  • (2022) infracloud.io: Progressive Delivery with Argo Rollouts: Canary Deployment [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Offers a practical exploration of canary rollouts configured via Argo Rollouts. Focuses on setting step-based traffic splitting, managing dynamic service mesh weights (SMI, Linkerd, Istio), and defining automated rollbacks based on analysis metrics.

Configuration Management

Progressive Delivery

Argo Workflows (1)

Release News

  • (2022) blog.argoproj.io: Whats new in Argo Workflows v3.3 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Highlights the key feature additions, execution optimizations, and performance enhancements introduced in Argo Workflows version 3.3. Discusses UI/UX developments, DAG scaling capabilities, and robust security upgrades.

ArgoCD

ApplicationSets

  • (2023) ==argoproj-labs/applicationset: Argo CD ApplicationSet Controller== 582 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The standard orchestrator extending Argo CD to support multi-cluster application distribution templates. Processes multi-source configurations, automates environment scaling, and drastically reduces the maintenance overhead of managing distinct Application manifests.
  • (2024) developers.redhat.com: Enhance Kubernetes deployment efficiency with Argo CD and ApplicationSet [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Deep technical review of optimization practices when deploying large-scale software footprints using ApplicationSets. Outlines how to maximize rendering efficiency, prevent performance bottlenecks, and design clean matrix-based generators.

Authentication and SSO

GitHub Integration
  • (2021) cloud.redhat.com: How to Use ArgoCD Deployments with GitHub Tokens 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Explains how to securely integrate ArgoCD with private GitHub repositories using Personal Access Tokens (PATs) and fine-grained permissions. Addresses secure secret management inside Kubernetes to safeguard credentials used during the repository fetching phase.

Best Practices

  • (2022) datree.io: ArgoCD Best Practices You Should Know 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Expands on essential ArgoCD best practices, emphasizing the isolation of Git repositories for source code and Kubernetes manifests, configuring auto-prune, and defining declarative sync policies to maintain platform stability.

Bootstrap Automation

Autopilot
  • (2023) ==argoproj-labs/argocd-autopilot: Argo-CD Autopilot== 1121 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An official Argo project opinionated tool designed to structure, install, and update Argo CD setups automatically. Uses a clean directory structure separating infrastructure from application manifests, enabling rapid multi-project bootstrap with version tracking and disaster recovery features.

Concepts and Practices

  • (2022) thenewstack.io: Applied GitOps with ArgoCD 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A comprehensive examination of GitOps workflows operationalized via ArgoCD. Highlights key practices such as declarative environment definition, pull-based synchronization, and automated drift detection to maintain cluster state parity.
  • (2022) thenewstack.io: Why ArgoCD Is the Lifeline of GitOps 🌟🌟🌟 [COMMUNITY-TOOL] — Evaluates the architectural superiority of ArgoCD as a pull-based GitOps operator. Focuses on its continuous reconciliation loop, granular cluster state visualization, and out-of-the-box self-healing capabilities that minimize human intervention.
  • (2021) blog.risingstack.com: Argo CD Kubernetes Tutorial 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A structured starter guide covering ArgoCD installation, repository connection, and application deployment. Outlines core synchronization paradigms and provides a practical walkthrough of transitioning standard manifests to GitOps.
  • (2021) blog.getambassador.io: GitOps in Kubernetes with ArgoCD 🌟🌟🌟 [COMMUNITY-TOOL] — Describes the conceptual pillars of GitOps and details how ArgoCD implements them on Kubernetes. Explains key mechanisms such as out-of-sync alert signaling, dry-run synchronization, and visual drift visualization.

Introduction

  • (2022) kubebyexample.com: Argo CD Overview 🌟 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A foundational educational overview of the ArgoCD engine, architecture, and UI dashboard. Introduces the concepts of Target State versus Live State, and details the controller-to-API communication model.

Multi-Cluster

ApplicationSets (1)
  • (2022) openshift.com: Getting Started with ApplicationSets 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Deep dive into the ArgoCD ApplicationSet controller, explaining how to model and automate multi-cluster and multi-tenant application deployments. Covers generators like List, Directory, and Git to scale configurations with minimal templating boilerplate.
  • (2022) piotrminkowski.com: Manage Multiple Kubernetes Clusters with ArgoCD 🌟 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Step-by-step architectural guide on configuring a centralized ArgoCD instance to manage resources across several remote Kubernetes clusters. Covers network endpoints, remote credentials provisioning, and configuration drift auditing.

Patterns

App-of-Apps
  • (2021) opensource.com: Automatically create multiple applications in Argo CD 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Demonstrates how to leverage the 'App-of-Apps' pattern in ArgoCD to construct recursive, nested application structures. Enables engineers to automate the bootstrapping of complex multi-tier platforms from a single root configuration.

Plugins and Extensions

  • (2023) github.com/crumbhole/argocd-lovely-plugin: argocd-lovely-plugin 486 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A flexible Custom Config Management Plugin (CMP) for Argo CD designed to combine Helm, Kustomize, and raw YAML. It solves the nested tooling dilemma by processing multiple template layers without requiring complex shell scripts, simplifying enterprise GitOps chains.

Synchronization Strategies

  • (2022) blog.argoproj.io: New sync and diff strategies in ArgoCD [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Explores performance optimizations and enhanced reconciliation engines introduced in ArgoCD. Details advanced diff options, custom synchronization hooks, and resource tracking methods that streamline deployment workflows in large-scale environments.

Tutorials

  • (2022) digitalocean.com: How to Deploy to Kubernetes using Argo CD and GitOps 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — A practical implementation guide showcasing the deployment of containerized workloads onto DigitalOcean Kubernetes (DOKS) using ArgoCD. Establishes a complete declarative delivery pipeline driven by version-controlled manifests.

Workload Management

Demos
  • (2023) github.com/myspotontheweb/gitops-workloads-demo [YAML CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — Comprehensive demo repository showcasing real-world GitOps workload configurations. Provides a structural blueprint for multi-tenant environments, detailing how to cleanly decouple cluster-wide infrastructure configurations from individual application manifests.

CICD Integration

Tool Comparison

ArgoCD vs FluxCD

  • (2022) thenewstack.io: GitOps on Kubernetes: Deciding Between Argo CD and Flux 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Evaluates the architectural differences, strengths, and trade-offs of the two dominant GitOps controllers: ArgoCD and FluxCD. Compares ArgoCD's powerful web UI and multi-tenancy model against Flux's lightweight, decentralized, and Kubernetes-native approach.

Kubernetes GitOps and Packaging

Argo Project Ecosystem (1)

Event-Driven Automation

GitOps Strategy

  • (2026) argoproj.github.io: Argo CD - Declarative GitOps for Kubernetes [GO CONTENT] [COMMUNITY-TOOL] — The absolute industry standard for GitOps-based continuous delivery on Kubernetes. Argo CD synchronizes active cluster states with declarative configurations stored in git repositories, providing robust drift correction, visual dashboarding, and audit controls.
  • (2022) Why and when do you need Argo CD? [N/A CONTENT] [COMMUNITY-TOOL] — An executive guide explaining the core capabilities of GitOps and the necessity of declarative pull engines like Argo CD. It details drift management, configuration alignment, and security advantages compared to manual push deployments.

UI Visualization

  • (2024) ==feat(ui): Add AppSet to Application Resource Tree in Argo CD== 23128 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The official Argo CD feature enhancement that maps ApplicationSets directly inside the dashboard UI tree. This view simplifies managing multi-tenant topologies and nested application definitions for platform operators.

Video Guides

  • (2022) youtube: GitOps with Argo-CD & Kubernetes [N/A CONTENT] [COMMUNITY-TOOL] [GUIDE] — An introductory video guide showing how to configure and run continuous deployment pipelines using Argo CD and Kubernetes. It walks through initial repository setups, synchronization configurations, and basic troubleshooting procedures.

Platform Engineering

ArgoCD (1)

Internal Developer Platforms

Security and Compliance

RBAC
  • (2021) itnext.io: ArgoCD: users, access, and RBAC 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Details the configuration of user management, local accounts, and role-based access control (RBAC) in ArgoCD. Guides platform engineers through restricting access to specific applications, projects, or clusters using fine-grained policies.

CICD Migration

Argo Workflows (2)

Jenkins
  • (2022) Migrating CI/CD from Jenkins to Argo Workflows [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [LEGACY] — Shares practical lessons from migrating a legacy Jenkins CI pipeline stack over to container-native Argo Workflows. Compares the performance, cost efficiency, resource overhead, and maintainability of step-based DAG flows.

GitOps

AWS EKS

Tekton
  • (2022) ==aws.amazon.com: Cloud Native CI/CD with Tekton and ArgoCD on AWS== [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Discusses designing an end-to-end, Kubernetes-native CI/CD pipeline on AWS EKS. Uses Tekton for building and containerizing microservices, seamlessly handing off the deployment phase to ArgoCD for pull-based application delivery.

ArgoCD (2)

Architecture Topologies
  • (2022) ==akuity.io: How many do you need? - Argo CD Architectures Explained== [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Evaluates different topology designs for ArgoCD deployments in large organizations. Details the trade-offs between a single centralized Hub-and-Spoke cluster controller versus multiple decentralized Argo instances scattered across target clusters.
Terraform Integration
  • (2022) seraf.dev: ArgoCD Tutorial — (with Terraform) 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — Guides engineers on bootstrapping an entire ArgoCD installation, including repositories, projects, and application instances, declaratively via the official HashiCorp Terraform provider for ArgoCD.

Authentication and SSO (1)

OpenShift
  • (2022) openshift.com: OpenShift Authentication Integration with ArgoCD 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Analyzes the integration of OpenShift's native OAuth server with ArgoCD. Explains how to map OpenShift user groups to ArgoCD RBAC roles, establishing a secure, unified single sign-on (SSO) experience for enterprise platforms.

GitHub Actions

AWS EKS (1)

Kubernetes Operators

CRD Lifecycle
  • (2023) piotrminkowski.com: Manage Kubernetes Operators with ArgoCD [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Addresses challenges and patterns for deploying Kubernetes Operators (e.g., Prometheus Operator, Cert-Manager) via ArgoCD. Analyzes solutions for Custom Resource Definition (CRD) lifecycle management during upgrades and synchronization.

Multi-Tenancy

Security and Compliance (1)
  • (2021) ==blog.argoproj.io: Best Practices for Multi-tenancy in Argo CD== [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Outlines critical architectural patterns for implementing multi-tenancy in ArgoCD. Covers AppProjects boundaries, target namespace isolation, network policies, and cluster-wide RBAC to ensure secure sharing of GitOps infrastructure.

Terraform Integration (1)

Data Infrastructure

Infrastructure as Code

Modular Architecture

  • (2022) dev.to: Towards a Modular DevOps Stack 🌟🌟🌟 [COMMUNITY-TOOL] — Proposes a blueprint for building modular, maintainable DevOps platforms. Focuses on orchestrating infrastructure provisioners, secret engines, and GitOps engines under unified declarative frameworks to minimize vendor lock-in.

Terraform and AWS

EKS Modules
  • (2023) AWS EKS Argo CD Terraform Component [HCL CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Enterprise-ready Terraform submodule designed to deploy, configure, and bootstrap Argo CD onto an existing AWS EKS cluster. Standardizes complex security configurations, integrates with IAM Roles for Service Accounts (IRSA), and provisions preconfigured Helm releases.

Progressive Delivery (1)

DNS Routing

Blue-Green Deployment (1)
  • (2022) infracloud.io: How to Setup Blue Green Deployments with DNS Routing 🌟 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Examines advanced architectural design patterns using DNS-based routing to switch traffic for Blue-Green deployments. Discusses how to coordinate external load balancers and global DNS systems during the migration window.

Secret Management

HashiCorp Vault

ArgoCD Plugins
  • (2023) ==argoproj-labs/argocd-vault-plugin== 967 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An indispensable Argo CD plugin built to inject secrets dynamically from HashiCorp Vault, AWS Secrets Manager, or GCP Secret Manager. Replaces custom templating hacks by decrypting and injecting secret values directly into workloads at synchronization time, ensuring zero plaintext secrets enter the Git repository.
  • (2022) github.com/crumbhole/argocd-vault-replacer 109 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — A specialized replacement utility designed to pull secrets from HashiCorp Vault during the Argo CD rendering phase. Acts as a lightweight precursor/alternative to full plugin integrations, enabling targeted placeholder substitutions within native Kubernetes manifest streams.

Sealed Secrets

ArgoCD (3)
  • (2021) dev.to: Argo CD and Sealed Secrets is a perfect match 🌟🌟🌟🌟 [ENTERPRISE-STABLE] [GUIDE] — Illustrates the architecture of deploying Bitnami Sealed Secrets alongside ArgoCD. Solves the core GitOps paradox by allowing users to safely commit encrypted secrets to Git, which are then decrypted inside the cluster by the controller.

Security and Compliance (2)

Vulnerabilities and CVEs

ArgoCD Security

Remediation

💡 Explore Related: Jenkins | Sonarqube | Stackstorm