Skip to content

05 · Deploy

Argo CD

GitOps controller that keeps the cluster in sync with Git

  1. Code
  2. Build
  3. Scan planned
  4. Store
  5. Deploy
  6. Observe

What it does

Argo CD watches a Git repository of Kubernetes manifests and applies every change to the cluster, so the repo is always the source of truth.

How it runs here

Runs in the argocd namespace behind a Traefik IngressRoute on argocd.kei-space.com, with sign-in delegated to Keycloak over OpenID Connect. It polls the GitLab-hosted GitOps repository for every application it manages, and its reconciliation interval is tuned to 600 seconds so that polling more than 30 apps does not overload the single GitLab instance.

Connects to

Why I chose it

Rolling back is a git revert, and drift between the repo and the cluster shows up in the UI instead of being discovered during an incident.