OpenGitOps/GitOps Working Group July 2022 References [1] https://thenewstack.io/the-best-ci-cd-tool-for-kubernetes-doesnt-exist/ [2] https://youtu.be/UvwcVNv61Mo [3] https://opengitops.dev/#principles the various tools used most often to manage GitOps workflows. Many of the tools were developed to fill a gap in earlier tools used in In- frastructure as code (IaC). Therefore, we will go over a brief there’s a drift in your system, it won’t get fixed until the next time you run your IaC tool. You can set the tool to run at regular intervals or when your workflow triggers a change. But the idea behind

实例操作，启动、停止、重启、释放等 支持阿里云、腾讯云、华为云、AWS、Azure RDS。 8) 对象存储方面支持  支持显示 Bucket 列表  支持创建、删除 Bucket  支持上传、下载、删除文件  支持设置文件访问权限(私有还是公开访问)  支持查看各个 Bucket 及文件存储使用量 支持阿里云、腾讯云、华为云、AWS 对象存储。 图 24: 对象存储概览 我司目前自身使用

true in most simple cases, but as soon as you have dynamic values in your manifests, your GitOps tool will start fighting against you. Some classic examples are: ● The replica count if you have an (especially values with dates or timestamps) As soon as your cluster state changes, your GitOps tool will try to sync the initial value from Git and in most cases, this is not what you want. State to rollback: 1. You can simply point your cluster to a previous Git hash and let your GitOps tool sync that hash. This is the fastest way to rollback, but by definition leaves your cluster in an

monitor what’s running on the cluster and notify teams if it`s desirable or undesirable. Every GitOps tool nowadays comes up with the ability to monitor and notify us in this way. COMPLIANCE AND AUDITING another approach to manage is Overlay Configuration. Kustomize is a configuration management tool based on this approach one. Kustomize works off a concept of “where, what, and how” to refactor microservice runs in the cluster. When the developer pushes the code to Git, a continuous integration tool kicks off unit tests that eventually build the Docker container image that gets pushed to the

securely to complex applications running in Kubernetes. Freedom of choice Because there is no single tool that can do everything required in your pipeline, GitOps gives you the freedom to choose the best application will run in your cluster. When you push that code to Git, the continuous integration tool kicks off unit tests that eventually build the Docker image that gets pushed to the container registry your API credentials with the CI tooling and that means your CI tool becomes a high value target. If someone breaks into your CI tool, they will have total control over your production cluster, even

managing the underlying infrastructure of an application. It utilizes Git as the source code management tool for managing the infrastructure code. In other words, GitOps is an evaluation of infrastructure as provision or modify the infrastructure. Additionally, GitOps offers users the flexibility to select any tool, technology, or platform and use the same DevOps practices when creating infrastructure. Principles GitOps If your organization already has a properly implemented DevOps pipeline using Git as the SCM tool, implementing GitOps to cover the infrastructure is a pretty straightforward process. Simply: Add

includes approaches such as canary releasing and blue-green deployments. Flagger is an open source GitOps tool that is purpose-built to manage all aspects of progressive delivery. THE GITOPS GUIDE TO BUILDING that make up the GitOps toolchain. Weaveworks and the CNCF delivered a transformative open source tool with Flux; managing Kubernetes deployments at scale is now easy and fast.” — Nicolas Chaillan core DevSecOps practices the norm without any added effort. Leverage Flagger and a service mesh tool to execute complex progressive delivery patterns like canary releasing and blue-green deployments

securely deploy changes to Kubernetes that doesn’t require them to become experts in the orchestration tool. That’s where GitOps comes in. See how much faster you Git using DevOps and GitOps together their microservices and Weave Flux handles the deployments.” The Platform Team wanted to leverage a tool that would integrate well with the engineer’s existing pipelines and automate changes applied to

Argo CD Kustomize Argo CD - What is It? Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. ● Easily deploy applications in a declarative way ● Synchronizes cluster state tools including: ○ Helm ○ Kustomize ○ Ksonnet/Jsonnet ○ Directories of yaml ● It is not a CI tool What is an Argo CD Application? apiVersion: argoproj.io/v1alpha1 kind: Application metadata: name:

20 部署出dev deployment and service env 21 Argo CD 22 •A declarative, GitOps continuous delivery tool for Kubernetes 用ArgoCD 搭配kustomize來部署環境ㄌ 23 歡迎大家參考 III DevOps 更多詳細教學影音，請觀看我們的 YouTube 影音 影音連結