Security with GitOps

Implementing GitOps offers several benefits for the security of software development processes. By using Git as a central source for configuration and code, the integrity and traceability of environments can be ensured. In this chapter, we will explore the various aspects of security in the context of GitOps.

We will begin by examining the well-known Cockpit and Fleet approaches and use them to highlight various security considerations when using Argo CD. Next, we will focus on Kyverno as a policy engine that acts as a gatekeeper, defining what is allowed on the cluster and which deployments are even permitted.

The topic of permissions plays a central role in the context of GitOps. Therefore, we will discuss the secure handling of secrets and introduce two tools that have already been successfully adopted in the industry.

From the perspective of the platform team, we will consider the provisioning of context information such as cert-manager, Ingress Controllers...