OpenGitOps/GitOps Working Group July 2022 References [1] https://thenewstack.io/the-best-ci-cd-tool-for-kubernetes-doesnt-exist/ [2] https://youtu.be/UvwcVNv61Mo [3] https://opengitops.dev/#principles there’s a drift in your system, it won’t get fixed until the next time you run your IaC tool. You can set the tool to run at regular intervals or when your workflow triggers a change. But the idea behind a new set of containers. That’s it. To get the same behavior from IaC and fixed servers, the IaC tool would have to destroy the node and recreate it every time there is immutable drift, which isn’t too

true in most simple cases, but as soon as you have dynamic values in your manifests, your GitOps tool will start fighting against you. Some classic examples are: ● The replica count if you have an (especially values with dates or timestamps) As soon as your cluster state changes, your GitOps tool will try to sync the initial value from Git and in most cases, this is not what you want. State to rollback: 1. You can simply point your cluster to a previous Git hash and let your GitOps tool sync that hash. This is the fastest way to rollback, but by definition leaves your cluster in an

monitor what’s running on the cluster and notify teams if it`s desirable or undesirable. Every GitOps tool nowadays comes up with the ability to monitor and notify us in this way. COMPLIANCE AND AUDITING another approach to manage is Overlay Configuration. Kustomize is a configuration management tool based on this approach one. Kustomize works off a concept of “where, what, and how” to refactor microservice runs in the cluster. When the developer pushes the code to Git, a continuous integration tool kicks off unit tests that eventually build the Docker container image that gets pushed to the

securely to complex applications running in Kubernetes. Freedom of choice Because there is no single tool that can do everything required in your pipeline, GitOps gives you the freedom to choose the best application will run in your cluster. When you push that code to Git, the continuous integration tool kicks off unit tests that eventually build the Docker image that gets pushed to the container registry your API credentials with the CI tooling and that means your CI tool becomes a high value target. If someone breaks into your CI tool, they will have total control over your production cluster, even

managing the underlying infrastructure of an application. It utilizes Git as the source code management tool for managing the infrastructure code. In other words, GitOps is an evaluation of infrastructure as provision or modify the infrastructure. Additionally, GitOps offers users the flexibility to select any tool, technology, or platform and use the same DevOps practices when creating infrastructure. Principles GitOps If your organization already has a properly implemented DevOps pipeline using Git as the SCM tool, implementing GitOps to cover the infrastructure is a pretty straightforward process. Simply: Add

includes approaches such as canary releasing and blue-green deployments. Flagger is an open source GitOps tool that is purpose-built to manage all aspects of progressive delivery. THE GITOPS GUIDE TO BUILDING that make up the GitOps toolchain. Weaveworks and the CNCF delivered a transformative open source tool with Flux; managing Kubernetes deployments at scale is now easy and fast.” — Nicolas Chaillan core DevSecOps practices the norm without any added effort. Leverage Flagger and a service mesh tool to execute complex progressive delivery patterns like canary releasing and blue-green deployments

securely deploy changes to Kubernetes that doesn’t require them to become experts in the orchestration tool. That’s where GitOps comes in. See how much faster you Git using DevOps and GitOps together their microservices and Weave Flux handles the deployments.” The Platform Team wanted to leverage a tool that would integrate well with the engineer’s existing pipelines and automate changes applied to

Argo CD Kustomize Argo CD - What is It? Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. ● Easily deploy applications in a declarative way ● Synchronizes cluster state tools including: ○ Helm ○ Kustomize ○ Ksonnet/Jsonnet ○ Directories of yaml ● It is not a CI tool What is an Argo CD Application? apiVersion: argoproj.io/v1alpha1 kind: Application metadata: name:

20 部署出dev deployment and service env 21 Argo CD 22 •A declarative, GitOps continuous delivery tool for Kubernetes 用ArgoCD 搭配kustomize來部署環境ㄌ 23 歡迎大家參考 III DevOps 更多詳細教學影音，請觀看我們的 YouTube 影音 影音連結

webhooks, events, and polished web UI @codefresh Argo CD A declarative GitOps continuous delivery tool for Kubernetes https://argoproj.github.io/argo-cd/ MyApp k8s manifest MyApp 1. Commit 5. Call