ArgoCD
No Change
adopt
ArgoCD. Is a declarative GitOps controller for Kubernetes: it watches Git (or Helm chart repos), compares desired state to the live cluster, and reconciles drift.
Summary
Garden stance: We adopt ArgoCD for our estate.
Key points:
| Topic | Notes |
|---|---|
| Sync | Manual, automatic, or selective; prune and self-heal options |
| Health | Built-in resource health; custom health via Lua |
| Multi-cluster | Register clusters; one Argo CD instance can manage many |
| Secrets | Never commit plaintext. Use sealed secrets, external secrets operators, or SSM/Vault integrations |
| RBAC | Project-scoped apps; integrate SSO (OIDC) for the UI |
Alternatives: Flux CD is the other common GitOps engine (similar model, different UX). Prefer one per estate; mixing controllers on the same apps causes pain.
References
Details
| Topic | Notes |
|---|---|
| Sync | Manual, automatic, or selective; prune and self-heal options |
| Health | Built-in resource health; custom health via Lua |
| Multi-cluster | Register clusters; one Argo CD instance can manage many |
| Secrets | Never commit plaintext. Use sealed secrets, external secrets operators, or SSM/Vault integrations |
| RBAC | Project-scoped apps; integrate SSO (OIDC) for the UI |
Alternatives: Flux CD is the other common GitOps engine (similar model, different UX). Prefer one per estate; mixing controllers on the same apps causes pain.
References