What isn’t GitOps?

• Letting humans admin K8s clusters directly (kubectl)
  • (once you’ve fully adopted GitOps, daily kubectl use should stop)
• Using Git to store IaC, and letting GHA push to K8s
  • (IaC is a prerequisite for GitOps, but not enough on its own)
• Pushing changes to K8s clusters
  • (GitOps is a pull model from within the system that is getting updated)
• Any CI/CD system that doesn’t self-heal the cluster after deployment
  • (If you kubectl delete deploy/wordsmith-api in your cluster, GitOps should restore it)

PSA: No tool is GitOps

Just like no tool is DevOps

• GitOps is a set of principles, not a tool
• Argo CD is a CD tool that helps you implement GitOps principles
• Argo CD can be used imperatively 😒
• Argo CD can let you change things outside git, causing drift 😠
• Argo CD lets you do imperative things without history or rollback 😭
• It’s up to YOU to restrict access to the Argo CD UI and CLI 🚔