Awesome-GitOps

A curated list for awesome GitOps resources inspired by @sindresorhus' awesome

We follow this code of conduct.

What is GitOps?

GitOps is a way to do Kubernetes cluster management and application delivery. It works by using Git as a single source of truth for declarative infrastructure and applications, together with tools ensuring the actual state of infrastructure and applications converges towards the desired state declared in Git. With Git at the center of your delivery pipelines, developers can make pull requests to accelerate and simplify application deployments and operations tasks to your infrastructure or container-orchestration system (e.g. Kubernetes).

Why is GitOps awesome?

It increases developer productivity, enhances developer experience, improves stability, all while having higher reliability, higher consistency and stronger security guarantees.

Modern software development practices assume support for reviewing changes, tracking history, comparing versions, and rolling back bad updates; GitOps applies the same tooling and engineering perspective to managing the systems that deliver direct business value to users and customers.

• Background
• Tools
• Ancillary Tools
  • Notifications
  • Secrets
• Tutorials
• Community

Background

• Operations by pull request - a blog entry about how GitOps came about at Weaveworks
• GitOps.tech - a summary of how GitOps works
• GitOps Conversation Kit - How to showcase GitOps awesomeness and convince all stakeholders to implement it
• GitOps Working Group - GitHub repo of GitOps working group under the CNCF App Delivery SIG.

Tools

• ArgoCD - Declarative continuous deployment for Kubernetes
• Atlantis - Terraform pull request automation
• Autoapply - Automatically apply changes from a Git repository to a Kubernetes cluster
• Carvel — Tool suite for building, packaging, and managing software on Kubernetes in a GitOps way
• CloudBees Rollout - Feature Flag as-a-Service that leverages GitOps & Config-as-Code (commercial product from CloudBees)
• Flux - Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit
• Helm Operator - Automates Helm Chart releases in a GitOps manner
• Flagger - Progressive delivery Kubernetes operator (Canary, A/B testing and Blue/Green deployments automation)
• Ignite - A Virtual Machine manager with a container UX and built-in GitOps
• Faros - CRD based GitOps controller
• Jenkins X - a CI/CD platform for Kubernetes that provides pipeline automation, built-in GitOps and preview environments
• Kubefirst - Fully-automated OSS delivery & infrastructure management gitops platforms
• KubeStack - GitOps framework using Terraform for Cloud Kubernetes distros (AKS, GKE, and EKS) with CI/CD examples for common tools
• Proxmox-GitOps - Self-contained GitOps framework for LXC-based container automation on Proxmox VE.
• Sceptre - Sceptre is a tool to drive AWS CloudFormation as part of a CI/CD pipeline by using Hooks
• Weave GitOps OSS - Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise.
• Weave GitOps Enterprise - Weave GitOps Enterprise is a continuous operations product that makes it easy to deploy and manage Kubernetes clusters and applications at scale in any environment. (commercial product from Weaveworks)
• Werf - GitOps tool with advanced features to build images and deploy them to Kubernetes (integrates with any existing CI system)
• PipeCD - Continuous Delivery for Declarative Kubernetes, Serverless and Infrastructure Applications
• Grant.rs - Manage Redshift/Postgres privileges in GitOps style
• Gimlet - The Flux-based Internal Developer Platform
• argocd-backup-s3 - Kubernetes CronJob to backup ArgoCD with argocd admin export cmd and upload to S3 compatible storage

Ancillary Tools

Notifications

• Fluxcloud - Slack notifications for Flux without Weave Cloud

Secrets

• argocd-vault-plugin - An ArgoCD plugin to retrieve secrets from Vault and inject them into Kubernetes resources
• git-secret - A bash-tool to store your private data inside a git repository
• Kamus - Zero-trust secret encryption/decryption solution for Kubernetes applications
• Sealed Secrets - One-way encrypted Secrets
• SOPS - Secrets OPerationS
• Vault Secrets Operator - Sync secrets from Vault with Kubernetes

Tutorials

• Managing Helm releases the GitOps way - Flux and Helm Operator tutorial
• Automating Istio canary deployments with GitOps - Progressive Delivery tutorial with Flagger, Flux, Helm Operator and Istio
• Managing a multi-tenant cluster with GitOps - Flux and Kustomize tutorial
• GitOps-style continuous delivery with Cloud Build - Google Cloud Build tutorial

Community

• Kubernetes slack - #gitops channel for discussion of GitOps patterns and tooling
• CNCF slack - #flux channel for discussion of GitOps patterns and tooling
• Weaveworks slack - multiple channels (including #flagger, #wksctl and others) to discuss Weaveworks GitOps products, give feedback, and talk about general approaches