# argo-cd Published articles for argo-cd. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Beyond the sync: Argo CD needs an Enterprise Control Plane DevFeed: [Beyond the sync: Argo CD needs an Enterprise Control Plane]() Original publisher: [Read original article]() Author: Eric Minick Sudarshan Purohit Published: 2026-09-16T20:28:57.610955Z Content type: opinion Language: en Sources: [Harness Blog]() Topics: [argo-cd](), [GitOps](), [Orchestration](), [DevOps](), [Platform Engineering](), [Deployment](), [Artificial Intelligence]() Tags: [argo-cd](), [deployment](), [gitops](), [governance](), [orchestration](), [platform-engineering](), [verification]() ### AI overview This article argues that Argo CD's manifest synchronization is only one part of enterprise software delivery. It describes how scaling GitOps can create operational toil and Argo sprawl, and proposes an enterprise control plane with workflow orchestration, governance, and deployment verification. ### Source excerpt Scaling GitOps? Argo CD is great for syncing manifests, but enterprise delivery requires workflow orchestration, governance, and AI verification. | Blog ## Implementing GitOps from Infrastructure to DB Operators to Unify Ops for Kubernetes Databases DevFeed: [Implementing GitOps from Infrastructure to DB Operators to Unify Ops for Kubernetes Databases]() Original publisher: [Read original article]() Author: Sucahyo Ardy Prasetiyo Published: 2026-09-16T08:57:10Z Content type: tutorial Language: en Sources: [SeveralNines]() Topics: [GitOps](), [Kubernetes](), [Terraform](), [argo-cd](), [ClusterControl](), [Databases](), [opentofu]() Tags: [argo-cd](), [clustercontrol](), [databases](), [gitops](), [hybrid-operations](), [infrastructure](), [kubernetes](), [opentofu](), [sovereign-dbaas](), [terraform]() ### AI overview This article describes a layered GitOps approach for Kubernetes database platforms: manage infrastructure with Terraform or OpenTofu, manage Kubernetes deployments with Argo CD, and standardize operations for operator-managed databases with ClusterControl. It explains how declarative configuration and drift reconciliation differ between Terraform and Argo CD, and compares infrastructure automation options including Atlantis and Flux tf-controller. ### Source excerpt Most platform teams already use GitOps for their Kubernetes apps. The config lives in Git, Argo CD applies it, and deployments are predictable. But look one layer down and things get messy. Infrastructure setup is often still done by hand, running Terraform locally or through scattered scripts. Database operations, especially for databases running through Kubernetes [...] The post Implementing GitOps from Infrastructure to DB Operators to Unify Ops for Kubernetes Databases appeared first on Severalnines. ## From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1 DevFeed: [From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1]() Original publisher: [Read original article]() Author: vmwareblogs Published: 2026-09-03T14:03:46Z Content type: article Language: en Sources: [VMware Blogs]() Topics: [GitOps](), [Platform Engineering](), [CI/CD](), [Automation](), [Cloud](), [Provisioning](), [Tooling]() Tags: [argo-cd](), [automation](), [cloud-infrastructure](), [cloud-native](), [continuous-delivery](), [deployment](), [gitops](), [home-page](), [platform](), [platform-engineering](), [provisioning](), [self-service](), [vcf-9-1](), [vcf-automation](), [vmware](), [vmware-cloud-foundation]() ### AI overview This VMware article announces VCF 9.1.1, which introduces a native GitOps service for VCF Automation Org users in Tech Preview. By integrating Argo CD, the update aims to centralize declarative application delivery, continuous delivery pipelines, and lifecycle management at enterprise scale, reducing manual work and operational friction for platform engineering teams. ### Source excerpt In today's fast-paced digital economy, where AI-driven innovation demands unprecedented agility, IT leaders are tasked with more than just provisioning infrastructure; they are expected to deliver a frictionless, self-service platform that accelerates software delivery. For platform engineers, cloud architects, and IT executives, the goal is to bridge the gap between robust infrastructure and modern application ... Continued The post From Bottleneck to Breakthrough: Centralizing GitOps at Enterprise Scale with VCF 9.1.1 appeared first on VMware Blogs. ## Best Kubernetes Infrastructure as Code Tools in 2026 DevFeed: [Best Kubernetes Infrastructure as Code Tools in 2026]() Original publisher: [Read original article]() Author: Pulumi Content Team Published: 2026-08-14T00:00:00Z Content type: comparison Language: en Sources: [Pulumi]() Topics: [Infrastructure as code](), [Kubernetes](), [Terraform](), [argo-cd](), [Helm charts](), [GitOps](), [flux](), [opentofu](), [Amazon EKS](), [AWS CloudFormation](), [VPC](), [AWS IAM]() Tags: [argo-cd](), [cloudformation](), [code](), [comparisons](), [devops](), [flux](), [general](), [gitops](), [helm](), [helm-charts](), [iam](), [infrastructure](), [infrastructure-as-code](), [kubernetes](), [opentofu](), [platform-engineering](), [terraform](), [vpc]() ### AI overview This comparison explains that Kubernetes infrastructure as code spans cluster and cloud provisioning, in-cluster workload definition, and continuous delivery and reconciliation. It presents Pulumi and Terraform or OpenTofu as general-purpose provisioning options, Helm and Kustomize for workload templating, and Argo CD and Flux for GitOps reconciliation. ### Source excerpt There is no single best Kubernetes infrastructure as code tool, because "Kubernetes IaC" actually spans three different jobs. For provisioning the cluster and its cloud dependencies, Pulumi and Terraform (or OpenTofu) are the strongest general-purpose options. For templating and packaging workloads, Helm and Kustomize dominate. For continuous reconciliation once things are running, Argo CD and Flux lead the GitOps category. The right stack usually combines one tool from each layer, not a single tool that claims to do all three. What counts as infrastructure as code for Kubernetes? Kubernetes infrastructure as code work splits into three layers that get conflated constantly, and the confusion is where most tool comparisons go wrong. The cluster and cloud layer provisions the things Kubernetes itself sits on top of: the managed control plane (EKS, GKE, AKS), node pools, the VPC and subnets, IAM roles, load balancers, and cluster add-ons. Terraform, Pulumi, and cloud-native tools like CloudFormation operate here. The in-cluster workload layer defines what runs on the cluster once it exists: Deployments, Services, ConfigMaps, CustomResourceDefinitions, and the Helm charts or Kustomize overlays that template them. This is where Helm, Kustomize, and Crossplane's custom resources live. The delivery and reconciliation layer keeps what's declared in Git in sync with what's actually running on the cluster, continuously, rather than as a one-shot apply. Argo CD and Flux own this layer, and they consume the output of the other two rather than replacing them. Most real Kubernetes platforms use tools from at least two of these layers together. A team might provision EKS with Terraform, package its application with Helm, and let Argo CD reconcile it continuously. Knowing which layer a tool actually addresses, rather than treating "Kubernetes IaC" as one shopping list, is the first decision that matters. Pulumi provisions the cluster and the workloads on it in the same language Pul ## Announcing new course: GitOps for Platform Engineering DevFeed: [Announcing new course: GitOps for Platform Engineering]() Original publisher: [Read original article]() Author: Sam Barlien Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [GitOps](), [Platform Engineering](), [Infrastructure as code](), [Kubernetes](), [CI/CD](), [Orchestration]() Tags: [argo-cd](), [flux](), [infrastructure-as-code](), [kubernetes](), [orchestration](), [platform-engineering](), [training](), [tutorials]() ### AI overview This article announces a course on GitOps for Platform Engineering that addresses enterprise-scale challenges such as managing multi-cluster environments, applying policy-driven workflows, scaling to large fleets, and driving organizational adoption. It covers GitOps fundamentals, Argo CD, Flux, Infrastructure as Code, agent-based reconciliation, configuration sprawl, and platform requirements for AI workloads. ### Source excerpt Bridge the gap between GitOps 101 and enterprise reality. Learn multi-cluster, policy-driven GitOps for Platform Engineering from expert Artem Lajko ## Why installing Argo CD didn't fix your deployments DevFeed: [Why installing Argo CD didn't fix your deployments]() Original publisher: [Read original article]() Author: Koray Oksay Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [GitOps](), [Deployment](), [Git](), [Kubernetes]() Tags: [argo-cd](), [deployment](), [flux](), [git](), [kubernetes](), [organizational](), [production]() ### AI overview The article argues that installing Argo CD or Flux does not by itself make deployments safer, auditable, or self-service. GitOps exposes unresolved organizational questions about production ownership, approval authority, accountability, repository access, and operational responsibility. Successful GitOps adoption therefore depends on organizational design and clearly defined trust boundaries, not only on tooling. ### Source excerpt GitOps tools like Argo CD won't solve underlying organizational issues. This article argues that GitOps is an organizational decision that exposes pre-existing ambiguity around ownership, production responsibility, and trust boundaries. Learn why clear organizational design is the true foundation for GitOps success. ## Harness AI Verification and Rollback for Argo CD: Limitations of Static Thresholds DevFeed: [Harness AI Verification and Rollback for Argo CD: Limitations of Static Thresholds]() Original publisher: [Read original article]() Author: Prasad Satam Akshit Madan Shubhendu Patidar Published: 2026-06-17T00:00:00Z Content type: opinion Language: en Sources: [Harness Blog]() Topics: [argo-cd](), [GitOps](), [Kubernetes](), [Artificial Intelligence](), [Prometheus]() Tags: [ai](), [argo-cd](), [gitops](), [harness](), [kubernetes](), [machine-learning](), [maintenance](), [progressive-delivery](), [prometheus](), [rollback](), [software-delivery](), [statistical-significance]() ### AI overview This vendor commentary argues that Argo Rollouts Analysis Templates can be difficult to maintain because they rely on manually defined static thresholds. It presents Harness AI Verification and Rollback as a context-aware alternative that uses unsupervised machine learning and service health trajectories to assess deviations and support rollbacks. ### Source excerpt Stop the maintenance nightmare of static thresholds. Learn how Harness AI Verification and Rollback provides context-aware safety for Argo CD. | Blog ## Faster than the advisory DevFeed: [Faster than the advisory]() Original publisher: [Read original article]() Published: 2026-06-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [argo-cd](), [GitOps](), [Vulnerabilities](), [Kubernetes](), [chainguard os](), [anthropic](), [Artificial Intelligence]() Tags: [ai](), [anthropic](), [argo-cd](), [chainguard-containers](), [chainguard-os](), [container-images](), [gitops](), [kubernetes](), [scanner-advisories](), [security](), [vulnerabilities](), [wolfi]() ### AI overview The article explains how Chainguard Factory delivered a patched Argo CD version to Wolfi and Chainguard OS before the related security advisory reached GitHub's global advisory database. It argues that automated upstream tracking and rapid remediation are increasingly important because vulnerability exploitation and AI-assisted discovery are outpacing traditional disclosure timelines. ### Source excerpt Chainguard often ships security fixes before advisories reach scanners. Learn why upstream speed matters in the era of AI-driven exploits. ## From Tickets to Pull Requests: Running Cilium in a GitOps Platform DevFeed: [From Tickets to Pull Requests: Running Cilium in a GitOps Platform]() Original publisher: [Read original article]() Author: Dean Lewis Published: 2026-06-02T12:56:19Z Content type: tutorial Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [Cilium](), [GitOps](), [argo-cd](), [Kyverno](), [ci]() Tags: [argo](), [argo-cd](), [ci](), [cilium](), [gitops](), [hubble-timescape](), [kyverno](), [network-policy](), [platform-engineering](), [pull-requests]() ### AI overview The article describes running Cilium as part of a GitOps platform using Argo CD, Kyverno, and isopolicy CI. ### Source excerpt Run Cilium as a GitOps platform: use Argo CD, Kyverno, and isopolicy CI. ## Operationalize Redpanda Connect with GitOps DevFeed: [Operationalize Redpanda Connect with GitOps]() Original publisher: [Read original article]() Author: Ben Barkhouse Published: 2025-12-02T00:00:00Z Content type: tutorial Language: en Sources: [Redpanda]() Topics: [GitOps](), [Kubernetes](), [CI/CD](), [internal developer portal](), [Command-line interface](), [Git]() Tags: [argo](), [argo-cd](), [auditability](), [cli](), [deployment](), [developer-experience](), [github](), [gitops](), [kubernetes](), [redpanda-connect](), [security](), [yaml]() ### AI overview This tutorial explains how to operationalize Redpanda Connect with GitOps on Kubernetes. It covers declarative management through Git and Argo CD, deployment workflows, and the differences between standalone mode and Streams mode for running pipelines. ### Source excerpt Here's how to operationalize Redpanda Connect with GitOps for less manual ops, predictable deployments, and a standard workflow. ## Anatomy of a Pull Request Generator DevFeed: [Anatomy of a Pull Request Generator]() Original publisher: [Read original article]() Author: Shawn Sesna Published: 2025-10-02T14:48:57Z Content type: tutorial Language: en Sources: [Codefresh]() Topics: [argo-cd](), [pull-requests](), [Kubernetes](), [Git](), [bitbucket](), [Deployment]() Tags: [argo-cd](), [bitbucket](), [deployment](), [git](), [kubernetes](), [pull-request](), [technical-guides]() ### AI overview This tutorial explains Argo CD's Pull Request Generator, an ApplicationSet deployment type that monitors a Git repository for matching pull requests, deploys their manifests to ephemeral environments, and removes the deployed resources when the pull request closes. It also breaks down the manifest configuration, including polling intervals and Bitbucket Server settings. ### Source excerpt Argo CD has built a number of Generators to support various scenarios that developers need when using Argo CD and Kubernetes. In this post, I'll be discussing the Pull Request Generator. A Pull Request Generator is an Argo CD Application Set deployment type that is configured to "watch" a Git repository for Pull Requests (PRs). [...] The post Anatomy of a Pull Request Generator appeared first on Codefresh. ## Top 30 Argo CD Anti-Patterns to Avoid When Adopting Gitops DevFeed: [Top 30 Argo CD Anti-Patterns to Avoid When Adopting Gitops]() Original publisher: [Read original article]() Author: Kostis Kapelonis Published: 2025-08-19T16:36:21Z Content type: tutorial Language: en Sources: [Codefresh]() Topics: [argo-cd](), [GitOps](), [Kubernetes](), [Helm charts]() Tags: [argo-cd](), [best-practices](), [devops](), [gitops](), [helm-charts](), [kubernetes]() ### AI overview This article explains common anti-patterns teams encounter when adopting Argo CD and GitOps. It focuses on understanding Argo CD's declarative setup and storing applications and related Kubernetes resources in Git so deployments and configuration can be recreated reliably. ### Source excerpt The time has finally come! After the massive success of our Docker and Kubernetes guides, we are now ready to see several anti-patterns for Argo CD. Anti-patterns are questionable practices that people adopt because they seem like a good idea at first glance, but in the long run, they make processes more complicated than necessary. [...] The post Top 30 Argo CD Anti-Patterns to Avoid When Adopting Gitops appeared first on Codefresh. ## Announcing the Apollo GraphOS Operator in Public Preview DevFeed: [Announcing the Apollo GraphOS Operator in Public Preview]() Original publisher: [Read original article]() Author: Josh Lambert Published: 2025-08-05T06:00:00Z Content type: release Language: en Sources: [Apollo Blog]() Topics: [GraphQL](), [Kubernetes](), [API Platform](), [Amazon API Gateway](), [GitOps](), [Deployment](), [observability]() Tags: [announcement](), [api](), [api-management](), [api-platform](), [apollo](), [argo-cd](), [datadog](), [declarative](), [deployment](), [gitops](), [graphos](), [graphql](), [kubernetes](), [observability](), [operator](), [preview]() ### AI overview Apollo announced the Apollo GraphOS Operator in public preview. The Kubernetes operator is designed to help teams manage GraphQL deployments, including development environments, progressive production rollouts, rollbacks, monitoring, and declarative or GraphOS Studio-based management. ### Source excerpt Simplifying GraphQL API Management on Kubernetes As GraphQL adoption accelerates within organizations, so too does the need for a scalable, reliable API platform that empowers your developers and accelerates innovation. Today, we're excited to introduce in public preview the Apollo GraphOS Operator: the best way to manage GraphQL deployments within Kubernetes. ## Using Argo CD's targetRevision Field for Application Promotion DevFeed: [Using Argo CD's targetRevision Field for Application Promotion]() Original publisher: [Read original article]() Author: Kostis Kapelonis Published: 2025-08-01T13:57:26Z Content type: tutorial Language: en Sources: [Codefresh]() Topics: [argo-cd](), [GitOps](), [Kubernetes](), [Helm charts]() Tags: [argo](), [argo-cd](), [argocd](), [auditability](), [best-practices](), [continuous-deployment](), [gitops](), [helm-charts](), [kubernetes](), [usability]() ### AI overview This guide explains how Argo CD's targetRevision field tracks Git repositories or Helm chart versions and why using it as a promotion mechanism for developer applications can create usability and auditability problems. It recommends using targetRevision: HEAD in ApplicationSets, with specific Helm versions used sparingly for mostly static infrastructure applications. ### Source excerpt In our big guide on how to use ApplicationSets for Argo CD applications, we explained the best practice of having a 3-level structure for all manifests with a clear distinction between Argo CD Application files and Kubernetes resource files. In that article, we also outlined several anti-patterns that we have seen in the wild, meaning [...] The post Abusing the Target Revision Field for Argo CD Promotions appeared first on Codefresh. ## Configuring Slack Notifications with Argo Workflows DevFeed: [Configuring Slack Notifications with Argo Workflows]() Original publisher: [Read original article]() Author: Shawn Sesna Published: 2025-06-24T18:06:52Z Content type: tutorial Language: en Sources: [Codefresh]() Topics: [Kubernetes](), [CI/CD](), [Orchestration](), [Containers](), [YAML]() Tags: [applicationset](), [argo](), [argo-cd](), [ci-cd](), [clusters](), [containers](), [feature-flags](), [kubernetes](), [orchestration](), [product-and-tools](), [software-development](), [technical-guides](), [yaml]() ### AI overview This tutorial introduces Argo Workflows as an open source workflow engine for orchestrating parallel jobs and CI/CD pipelines on Kubernetes. It explains workflow definitions, containers, templates, dependencies, storage volumes, and workflow state. ### Source excerpt The acquisition of Codefresh gave me an exciting opportunity to learn new tech. Initially, I thought Argo was just Argo CD. I didn't realize that Argo consists of 4 distinct projects: A key feature of the Codefresh product is Promotion Flows, which makes heavy use of Argo Workflows. Promotion Flows add the ability to assign [...] The post Configuring Slack notifications with Argo Workflow - a learning experience appeared first on Codefresh. ## Distribute Your Argo CD Applications to Different Kubernetes Clusters Using Application Sets DevFeed: [Distribute Your Argo CD Applications to Different Kubernetes Clusters Using Application Sets]() Original publisher: [Read original article]() Author: Kostis Kapelonis Published: 2025-06-17T10:44:02Z Content type: tutorial Language: en Sources: [Codefresh]() Topics: [argo-cd](), [Kubernetes]() Tags: [applications](), [applicationset](), [argo](), [argo-cd](), [argo-cd-kubernetes](), [article](), [best-practices](), [clusters](), [how-to](), [kubernetes](), [kubernetes-clusters](), [series]() ### AI overview This guide explains how to use Argo CD ApplicationSets to distribute multiple applications across multiple Kubernetes clusters. It covers cluster selection, environment-specific settings, cluster labels, and combining the Git and Cluster generators. ### Source excerpt In the previous article in this series, we explained how Argo CD application Sets work and how to use them for organizing your applications in different environments or groups. We received a lot of positive feedback from our readers, and many teams now use the associated Git repository as a starting point for their own [...] The post Distribute Your Argo CD Applications to Different Kubernetes Clusters Using Application Sets appeared first on Codefresh. ## Combine the Codefresh GitOps Cloud with your existing Argo CD instance DevFeed: [Combine the Codefresh GitOps Cloud with your existing Argo CD instance]() Original publisher: [Read original article]() Author: Kostis Kapelonis Published: 2025-04-30T08:16:16Z Content type: article Language: en Sources: [Codefresh]() Topics: [argo-cd](), [GitOps](), [Kubernetes](), [Continuous Deployment (CD)](), [Deployment](), [Git]() Tags: [argo](), [argo-cd](), [argocd](), [codefresh](), [continuous-deployment](), [declarative](), [deployment](), [git](), [gitops](), [kubernetes](), [product-and-tools](), [pull-request]() ### AI overview This article explains Argo CD as a Kubernetes-native continuous deployment tool and describes how Codefresh GitOps Cloud can work with an existing Argo CD instance. It covers GitOps workflows, application promotion across clusters, declarative configuration, approvals, and deployment synchronization. ### Source excerpt We recently announced the new Codefresh GitOps Cloud, the easiest way to promote changes across Argo CD applications-even across different clusters. With Codefresh GitOps Cloud, you can model your own promotion flow with a graphical editor (although YAML is still available). You define exactly how an application reaches production, including all the requirements and approval [...] The post Combine the Codefresh GitOps Cloud with your existing Argo CD instance appeared first on Codefresh. ## Introducing Codefresh GitOps Cloud - Seamless environment promotions across clusters using your existing Argo CD DevFeed: [Introducing Codefresh GitOps Cloud - Seamless environment promotions across clusters using your existing Argo CD]() Original publisher: [Read original article]() Author: Kostis Kapelonis Published: 2025-03-30T23:48:40Z Content type: release Language: en Sources: [Codefresh]() Topics: [GitOps](), [argo-cd](), [Automation](), [Cloud]() Tags: [argo-cd](), [automation](), [cloud](), [codefresh](), [continuous-deployment](), [gitops](), [kubernetes](), [product-and-tools](), [reconciliation](), [sync]() ### AI overview Codefresh announces GitOps Cloud, an offering for GitOps deployments that supports multi-environment application promotions across clusters using existing Argo CD. The article also explains GitOps concepts and practices, including version-controlled desired state and continuous reconciliation. ### Source excerpt We're excited to announce our new Codefresh GitOps Cloud offering that lets you bring your GitOps deployments to the next level. You get: In this blog post, we'll dive into some of the key features of Codefresh GitOps Cloud. Multi-environment application promotions with Argo CD As more organizations adopt Argo CD, platform engineers need to [...] The post Introducing Codefresh GitOps Cloud - Seamless environment promotions across clusters using your existing Argo CD appeared first on Codefresh. ## Speeding Up Data Imports for Deployment Previews with PVC Snapshotting DevFeed: [Speeding Up Data Imports for Deployment Previews with PVC Snapshotting]() Original publisher: [Read original article]() Author: Nick Nikitas Published: 2024-01-23T12:48:14Z Content type: article Language: en Sources: [Blueground Engineering blog]() Topics: [Deployment](), [Kubernetes](), [Developer experience](), [pull-requests](), [data](), [Databases](), [argo-cd](), [Amazon Web Services]() Tags: [argo-cd](), [aws](), [data](), [databases](), [deployment](), [developer-experience](), [devops](), [kubernetes](), [platform](), [provisioning](), [pull-requests]() ### AI overview This article describes a bottleneck in deployment previews caused by importing de-identified production data into ephemeral environments. It introduces PVC snapshotting as the method used to provision previews more promptly and outlines drawbacks of the previous Argo CD- and Kubernetes-based approach, including lengthy waits, limited scalability, and errors. ### Source excerpt Check out our previous blog post to learn about implementing Deployment Previews, a concept popularized by Netlify and Vercel in Kubernetes. This post will explain our method of provisioning them promptly, rather than keeping our engineers waiting, using PVC snapshotting. This December, we went out and asked our colleagues to ## Chainguard and CNCF conduct SLSA assessments for Argo and Prometheus projects DevFeed: [Chainguard and CNCF conduct SLSA assessments for Argo and Prometheus projects]() Original publisher: [Read original article]() Published: 2023-04-19T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [open-source-security](), [supply-chain-security](), [Prometheus](), [Open Source](), [Security](), [chainguard]() Tags: [argo](), [argo-cd](), [audits](), [chainguard](), [cncf](), [github](), [maintainers](), [open-source](), [prometheus](), [provenance](), [security](), [security-best-practices](), [slsa](), [slsa-levels](), [software-supply-chain-security](), [supply-chain-integrity](), [supply-chain-security]() ### AI overview Chainguard and CNCF assessed the software supply chain security of the Argo CD and Prometheus projects using the SLSA framework. Argo CD achieved SLSA Level 3 for source, build, and provenance, while Prometheus achieved Level 3 for source and build; the assessment recommended adding provenance generation to Prometheus build infrastructure. ### Source excerpt Chainguard and the CNCF partnered to conduct security assessments of Argo and Prometheus to ensure open source software projects apply security best practices. ## How Wise bootstraps Spinnaker using ArgoCD DevFeed: [How Wise bootstraps Spinnaker using ArgoCD]() Original publisher: [Read original article]() Author: Nick Platt Published: 2023-02-20T12:24:46Z Content type: tutorial Language: en Sources: [Wise Engineering - Medium]() Topics: [argocd](), [spinnaker](), [CI/CD](), [GitOps](), [Kubernetes](), [Microservice](), [Deployment](), [Helm charts](), [Java]() Tags: [argo-cd](), [argocd](), [ci-cd](), [continuous-delivery](), [deployment](), [gitops](), [helm-charts](), [kubernetes](), [microservices](), [platform](), [spinnaker]() ### AI overview Wise explains how it bootstrapped Spinnaker automatically with ArgoCD instead of using a staging Spinnaker to manage production. The article compares Spinnaker's pipeline-based deployment model with ArgoCD's declarative GitOps reconciliation model and describes using ArgoCD and its App of Apps pattern to manage Spinnaker installations across Kubernetes clusters. ### Source excerpt Spinnaker and ArgoCD logos Deploying your deployment tool In our 2 part series, we discussed the state of our CI/CD systems and wrapped up with our vision for CD at Wise, and why we chose Spinnaker. Here's how we set up Spinnaker from scratch, overcoming the technical challenges of bootstrapping a CD platform. We wanted a hands-off and automated way to bootstrap Spinnaker. When researching across industry peers, one approach was to use a staging instance of Spinnaker to manage your production instance. This method of dual Spinnakers, wasn't viable for Wise, due to security concerns with a staging tool having access to change a production environment. It also meant accepting a potentially manual error prone process when managing your staging setup. Instead, we wanted to achieve a fully automatic installation for both of our Spinnaker environments and settled on using ArgoCD. Spinnaker & ArgoCD Spinnaker consists of around 11 Java microservices, which operates on a centralised deployment model -- push based deployments. It utilises pipelines heavily as its deployment strategy, which can be triggered via various input methods e.g. manual, artefact upload etc. Implementing deployments as pipelines allows engineers to describe a release as a set of steps, with powerful concepts such as canary analysis and quality gates built in. This is attractive for Wise, as use of standardised and reusable templates can enforce end consumers to follow a particular paved road e.g. canary deployments with automatic rollbacks. ArgoCD describes itself as "declarative GitOps for Kubernetes". It comprises fewer golang microservices and can be configured to be either centralised or decentralised. By default, ArgoCD differs by not utilising pipeline based deployments, instead operating via a GitOps reconciliation loop as its source of truth. Whatever is defined in Git, ArgoCD will try to reconcile within the cluster. ArgoCD is Kubernetes native and therefore can't be used for deploying infrast