Skip to content

GitOps

Architectural Context

Detailed reference for GitOps in the context of Engineering Pipeline.

Standard Reference

Application Delivery

Helm

Alternative Engines

  • Nelm: A Helm Alternative for Kubernetes Deployments ⭐ 1072 [ADVANCED LEVEL] [ENTERPRISE-STABLE] — An innovative deployment engine integrated within the Werf workflow that functions as an alternative to native Helm release tracking. It resolves Helm's tracking limitations by ensuring strict live cluster validation and resource health monitoring.

Infrastructure as Code

Terraform Components

  • AWS EKS Argo CD Terraform Component [COMMUNITY-TOOL] — Curator Insight: Enterprise-ready Terraform submodule designed to deploy, configure, and bootstrap Argo CD onto an existing AWS EKS cluster. Live Grounding: Standardizes complex security configuration flags, integrates smoothly with AWS IAM roles for service accounts (IRSA), and provisions preconfigured Helm-based releases.

GitOps (1)

Continuous Delivery

Argo CD

Infrastructure

GitOps (2)

Cluster Provisioning

  • Weave Kubernetes System Control - wksctl ⭐ 389 [ADVANCED LEVEL] [LEGACY] — An early GitOps-driven Kubernetes cluster manager from Weaveworks that provisioned clusters from a declared state stored in git. Following Weaveworks' operational shutdown, this project is considered legacy but remains highly influential in GitOps control-loop architecture history.
  • WKSctl: a Tool for Kubernetes Cluster Management Using GitOps [COMMUNITY-TOOL] — An InfoQ editorial piece analyzing the operational design of WKSctl. Explores how declarative machine and cluster definitions allowed users to bootstrap and reconcile nodes over SSH using Git as the source of truth.

Networking

Container Network Interface

CNI Plugins

  • github: Weave Net - Weaving Containers into Applications ⭐ 6613 [EN CONTENT] [ADVANCED LEVEL] [ENTERPRISE-STABLE] [LEGACY] — Weave Net is a resilient container CNI designed to create peer-to-peer overlay networks without external databases or configurations. The project was officially archived by Weaveworks in 2024, prompting teams to migrate to more modern CNI plugins like Cilium and Calico.

Platform Engineering

CI-CD Security

Cloud Identity

  • Avoiding Mistakes with AWS OIDC Integration Conditions [ADVANCED LEVEL] [DE FACTO STANDARD] — An in-depth security analysis detailing how to configure AWS OpenID Connect (OIDC) trust relationships correctly in GitHub Actions and other CI providers. Highlights major vulnerabilities arising from missing subject (sub) or audience (aud) validation and shows how to restrict access patterns safely.

💡 Explore Related: Flux | Argo | CI/CD