Argo CD Declarative GitOps for Kubernetes

• Introduction
• Argo CD Vulnerabilities
• Argo CD Tools
• Videos

Introduction

• argoproj.github.io: Argo CD - Declarative GitOps for Kubernetes
• youtube: GitOps with Argo-CD & Kubernetes
• Cloud Native Computing Foundation Accepts Argo as an Incubator Project
• openshift.com: OpenShift Authentication Integration with ArgoCD
• developers.redhat.com: OpenShift joins the Argo CD community (KubeCon Europe 2020)
• thenewstack.io: Applied GitOps with ArgoCD
• thenewstack.io: Why ArgoCD Is the Lifeline of GitOps
• openshift.com: Getting Started with ApplicationSets “App of Apps” pattern.
• medium: Argo CD: A Tool for Kubernetes DevOps
• itnext.io: ArgoCD: users, access, and RBAC
• opensource.com: Automatically create multiple applications in Argo CD
• cloud.redhat.com: How to Use ArgoCD Deployments with GitHub Tokens
• blog.risingstack.com: Argo CD Kubernetes Tutorial
• wecloudpro.com: Deploying Helm Charts with ArgoCD
• thenewstack.io: GitOps on Kubernetes: Deciding Between Argo CD and Flux
• medium.com/gumgum-tech: Streamlining your Kubernetes adoption with Helmfile / ArgoCD and GitOps
• levelup.gitconnected.com: Getting Started With ArgoCD on your Kubernetes Cluster A step-by-step guide to set up ArgoCD on your Kubernetes cluster and synchronize your resources with your GitHub repository.
• digitalocean.com: How to Deploy to Kubernetes using Argo CD and GitOps
• aws.amazon.com: Cloud Native CI/CD with Tekton and ArgoCD on AWS
• blog.argoproj.io: New sync and diff strategies in ArgoCD
• blog.argoproj.io: What’s new in Argo Workflows v3.3
• igboie.medium.com: Kubernetes CI/CD with GitHub, GitHub Actions and Argo CD
• faun.pub: Manage Prometheus alerting and recording rules using GitOps
• medium.com/containers-101: Using GitOps, Multiple Argo Instances, and Environments with Argo CD at Scale

• blog.argoproj.io: Architecting Workflows For Reliability Kubernetes is designed for stateless scalable web applications, apps where if one process dies, then another process can be dropped in its place. Kubernetes makes one promise — it will kill your pods. Kubernetes expects applications built on it to be tolerant of both any disruption— so apps must be designed with that in mind.

  Dear user,
  I will kill your pod:
  
  If I want the node for something more important.
  If I’m draining the node, or scaling down a cluster.
  If it runs out of memory (because you got the config wrong).
  If I overcommitted.
  Hardware failure (computer catches fire).
  Kernel panic.
  Absolutely any reason I feel like.
  
  I’m sorry — I am who I am.
  
  All the best,
  
  Kubernetes xx
  

• blog.argoproj.io: Best Practices for Multi-tenancy in Argo CD

• argoproj.github.io: Argo Events - The Event-driven Workflow Automation Framework Argo Events is an event-driven workflow automation framework for Kubernetes which helps you trigger K8s objects, Argo Workflows, Serverless workloads, etc. on events from a variety of sources like webhooks, S3, schedules, messaging queues, etc.
• jijujacob27.medium.com: Sharded applications on Kubernetes using Helm, ArgoCD, and Argo-Rollouts You will use Argo-Rollouts for deploying the app using the Blue/Green strategy.
• medium.com/@ScrumPokerPro: Cloud native architecture with Kubernetes and ArgoCD
• faun.pub: Deploying Argo CD and Sealed Secrets with Helm In this tutorial, you will go over the declarative setup of Argo CD and Sealed Secrets on a Kubernetes cluster. For deploying Argo CD and Sealed Secrets you will be using Helm Charts
• dev.to: The three meanings of “template” in Argo Workflows
• amralaayassen.medium.com: How to create ArgoCD Applications Automatically using ApplicationSet? “Automation of GitOps”
• argoproj.github.io: Argo Rollouts - Kubernetes Progressive Delivery Controller Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities such as blue-green, canary, canary analysis, experimentation, and progressive delivery features to Kubernetes
• blog.getambassador.io: GitOps in Kubernetes with ArgoCD
• blog.akuity.io: Unveil the Secret Ingredients of Continuous Delivery at Enterprise Scale with Argo CD Do you know that Argo CD can support thousands of apps and hundreds of clusters? in this article you will deep dive into Argo CD, bring answers and best practices on operating it at an enterprise scale
• dev.to: Towards a Modular DevOps Stack In this article, you will learn how to modularize your infrastructure using Terraform and ArgoCD
• datree.io: ArgoCD Best Practices
• devops.com: The Argo Project: Making GitOps Practical

Argo CD Vulnerabilities

• threatpost.com: Argo CD Security Bug Opens Kubernetes Cloud Apps to Attackers
• thehackernews.com: New Argo CD Bug Could Let Hackers Steal Secret Info from Kubernetes Apps
• armosec.io: CVE 2022-24348 – Argo CD High Severity Vulnerability and its impact on Kubernetes
• securityaffairs.co: Argo CD flaw could allow stealing sensitive data from Kubernetes Apps Argo CD is used by hundreds of organizations, including Alibaba Group, BMW Group, Deloitte, IBM, Intuit, Red Hat, Skyscanner, and Swisscom.
• infoworld.com: How to protect your Kubernetes infrastructure from the Argo CD vulnerability A zero-day vulnerability in Argo CD could be putting sensitive information like passwords and API keys at risk. Are you protected?

Argo CD Tools

• argoproj-labs/argocd-autopilot: Argo-CD Autopilot The Argo-CD Autopilot is a tool which offers an opinionated way of installing Argo-CD and managing GitOps epositories. New users to GitOps and Argo CD are not often sure how they should structure their repos, add applications, promote apps across environments, and manage the Argo CD installation itself using GitOps. Argo Autopilot is a project that solves that
• argoproj-labs/applicationset: Argo CD ApplicationSet Controller The ApplicationSet controller is a Kubernetes controller that adds support for a new custom ApplicationSet CustomResourceDefinition (CRD). The ApplicationSet controller manages multiple Argo CD Applications as a single ApplicationSet unit, supporting deployments to large numbers of clusters, deployments of large monorepos, and enabling secure Application self-service.
• IBM/argocd-vault-plugin An ArgoCD plugin to retrieve secrets from Hashicorp Vault and inject them into Kubernetes secrets.
• argoproj-labs/argocd-vault-plugin ArgoCD-Vault-plugin is an Argo CD plugin to retrieve secrets from various Secret Management tools (HashiCorp Vault, IBM Cloud Secrets Manager, AWS Secrets Manager, etc.) and inject them into Kubernetes resources - https://argocd-vault-plugin.readthedocs.io

Videos

Click to expand!