March 2022 Summaries

Infrastructure-as-Apps (IaA) is a concept that extends infrastructure-as-code by incorporating GitOps management principles, thereby enabling infrastructure to be managed like applications. Coined in 2021, IaA integrates tools such as Argo CD and Crossplane to provide a continuous monitoring and reconciliation approach, ensuring that infrastructure configurations remain consistent with their desired states. This approach streamlines infrastructure management by using GitOps operators to automate deployment, monitor for drift, and facilitate rollbacks, enhancing efficiency and recovery from failures. A notable implementation of IaA is seen at CERN, where it facilitates rapid provisioning of computing resources across multi-cloud environments to handle significant data processing loads. By treating infrastructure changes as pull requests, IaA centralizes security and resource management, reducing the need for individual cloud access permissions and improving oversight. IaA promises to transform infrastructure management by making it more predictable and secure, while also simplifying resource provisioning through the use of custom resources and abstraction of cloud provider differences.

The text provides a comprehensive overview of best practices for using Argo CD, a popular GitOps tool for Kubernetes, to enhance deployment workflows. It emphasizes the importance of separating configurations and source code into distinct Git repositories to prevent accidental production changes, creating a directory structure to support multi-application systems, and determining a promotion strategy to manage multiple applications effectively. The ApplicationSet feature is recommended for handling numerous applications, while the App of Apps pattern suits smaller deployments. The text also discusses the management of secrets, suggesting encryption methods and externalizing secrets for better security. Access to Argo CD should be controlled with role-based access control (RBAC), and there are options like Argo CD Core for organizations that prefer automation without UI access. Finally, the text encourages exploring other Argo projects, such as Argo Events, Workflows, and Rollouts, to further automate Kubernetes operations and integrate progressive delivery practices, all aimed at empowering teams and enhancing productivity in deploying applications.

The article delves into the advantages of using an "environment-per-folder" approach over the "environment-per-branch" model in GitOps practices, specifically for managing Kubernetes manifests. The author critiques the branch-based method for its complexity and potential for error, advocating instead for organizing environments as folders within a single branch. This structure allows for straightforward promotion and modification of configurations across environments through simple file operations, eliminating issues associated with merging branches and configuration drift. The discussion includes practical examples of how to implement this approach using tools like Kustomize and Helm, highlighting the benefits of enhanced clarity and reduced risk in deployment processes. The author also addresses security concerns regarding the single-branch strategy, suggesting solutions such as using two separate repositories for production and non-production environments if necessary. Overall, the article aims to provide a comprehensive understanding of the folder method's benefits in streamlining GitOps workflows.

The Codefresh Software Delivery Platform (CSDP) integrates the full suite of Argo tools into a unified system to enhance software deployment processes on a large scale, utilizing the principles of GitOps for efficient and repeatable configurations. New users start by installing the CSDP runtime on Kubernetes clusters, creating a Git repository with Kubernetes manifests that support GitOps-style deployments. This setup allows for seamless updates and configuration changes, which are made in the Git repository and synchronized by Argo CD. The article details two configuration examples: adjusting Argo CD's Git polling interval for deployments and configuring Argo Workflows to store logs in an S3 bucket. Both examples demonstrate the use of Kustomize for managing configurations, highlighting the importance of adding annotations to Kubernetes Deployments to automatically apply configuration changes without manual intervention, thereby adhering to GitOps principles. These practices ensure that any updates or configurations are tracked, consistent, and easily replicable across environments.

Codefresh, an open-source advocate, has integrated the Argo Projects into its Codefresh Software Delivery Platform (CSDP), which enhances existing Argo functionalities while adding new features for a comprehensive software delivery lifecycle. As the first commercial vendor for Argo, Codefresh contributes to the Argo community by maintaining the codebase, adding features, and offering educational and training initiatives, such as the GitOps certification. The company has also launched the Codefresh Hub for Argo Workflows and organized ArgoCon to foster community engagement. CSDP remains fully compatible with existing Argo installations, ensuring that workflows and applications created for Argo function seamlessly within the platform. Additionally, Codefresh provides a turn-key solution for enterprises seeking to adopt GitOps at scale, with features like a unified dashboard that aggregates multiple Argo CD instances, thereby simplifying management for large organizations.