k8s-gitops-cheatsheet
Table of Contents
- Table of Contents
- Certificate
- Configuration Management
- Continuous Deployment
- Continuous Development
- Ingress Controller
- Observability
- Pipeline
- Progressive Delivery
- Secret Management
- Service Mesh
Certificate
| Title | Description |
|---|---|
| cert-manager | |
| Traefik Ingress |
Configuration Management
| Title | Description |
|---|---|
| Jsonnet | Validate and define text-based and dynamic configuration |
| Kapitan | |
| cdk8s | |
| CUE Kubernetes | |
| dhall-kubernetes | |
| Grafana Tanka | |
| Helm | |
| kpt | |
| Ksonnet | |
| Kustomize | |
| Pulumi Kubernetes | |
| QBEC |
Continuous Deployment
| Title | Description |
|---|---|
| Argo CD | |
| Flux | |
| Jenkins X |
Continuous Development
| Title | Description |
|---|---|
| Skaffold | |
| Telepresence |
Ingress Controller
| Title | Description |
|---|---|
| AWS Load Balancer Controller | Manage Elastic Load Balancers for a Kubernetes cluster |
| Nginx Ingress Controller | |
| Traefik Ingress | |
| Istio |
Observability
| Title | Description |
|---|---|
| Kiali |
Pipeline
| Title | Description |
|---|---|
| Argo Workflows | |
| Tekton |
Progressive Delivery
| Title | Description |
|---|---|
| Argo Rollouts | Progressive Delivery for Kubernetes with customizable metric analysis |
| Flagger | Progressive delivery Kubernetes operator (Canary, A/B testing and Blue/Green deployments automation) |
| Istio |
Secret Management
| Title | Description |
|---|---|
| helm-secret | A helm plugin that help manage secrets with Git workflow and store them anywhere |
| Kamus | |
| Kustomize Secret Generator Plugins | |
| Sealed Secret | |
| SOPS | |
| Tesoro | Kapitan Secrets Controller for Kubernetes |
Discussion about managing secrets in GitOps
Tutorial
- Declarative secret management for GitOps with Kapitan - Kapitan
- Managing Kubernetes Secrets Securely with GitOps - SOPS
Service Mesh
| Title | Description |
|---|---|
| Istio | |
| Linkerd2 | A ultralight, security-first service mesh for Kubernetes, supported by CNCF |
| Traefik Mesh | A simple, opt-in by default, yet full-featured service mesh. |