flux - The GitOps Kubernetes operator

•    Go

Flux is a tool that automatically ensures that the state of a cluster matches the config in git. It uses an operator in the cluster to trigger deployments inside Kubernetes, which means you don't need a separate CD tool. It monitors all relevant image repositories, detects new images, triggers deployments and updates the desired running configuration based on that (and a configurable policy). The benefits are: you don't need to grant your CI access to the cluster, every change is atomic and transactional, git has your audit log. Each transaction either fails or succeeds cleanly. You're entirely code centric and don't need new infrastructure.

flagger - Istio and App Mesh progressive delivery Kubernetes operator

•    Go

Flagger is a Kubernetes operator that automates the promotion of canary deployments using Istio or App Mesh routing for traffic shifting and Prometheus metrics for canary analysis. The canary analysis can be extended with webhooks for running acceptance tests, load tests or any other custom validation. Flagger implements a control loop that gradually shifts traffic to the canary while measuring key performance indicators like HTTP requests success rate, requests average duration and pods health. Based on analysis of the KPIs a canary is promoted or aborted, and the analysis result is published to Slack.

kamus - An open source, git-ops, zero-trust secret encryption and decryption solution for Kubernetes applications

•    CSharp

An open source, GitOps, zero-trust secrets encryption and decryption solution for Kubernetes applications. Kamus enable users to easily encrypt secrets than can be decrypted only by the application running on Kubernetes. The encryption is done using strong encryption providers (currently supported: Azure KeyVault, Google Cloud KMS and AES). To learn more about Kamus, check out the blog post and slides. If you're running Kamus locally the Kamus URL will be like http://localhost:<port>. So you need to add --allow-insecure-url flag to enable http protocol.

argo-cd - Declarative Continuous Delivery for Kubernetes

•    Go

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Application definitions, configurations, and environments should be declarative and version controlled. Application deployment and lifecycle management should be automated, auditable, and easy to understand.

flagger - Istio progressive delivery Kubernetes operator

•    Go

Flagger is a Kubernetes operator that automates the promotion of canary deployments using Istio routing for traffic shifting and Prometheus metrics for canary analysis. The canary analysis can be extended with webhooks for running integration tests, load tests or any other custom validation. Before installing Flagger make sure you have Istio setup up with Prometheus enabled. If you are new to Istio you can follow my Istio service mesh walk-through.

gh-actions-demo - GitOps pipeline with GitHub actions and Weave Cloud

•    Go

GitHub Actions will become a major player on the CI SaaS market. It can easily replace most CI tools out there especially if you ship code as container images. With GitHub Actions you can do more than CI/CD. Most tasks performed today with bots (code sign validations, issue management, notifications, etc) can be made into workflows and run solely by GitHub. Why would you give up your current CI SaaS and self hosted bots for GitHub Actions? For one, GitHub Actions simplifies automation tasks by offering a serverless platform that is capable of handling most development tasks. As a developer you don't want to jump from one SaaS to another in order to diagnose a build error. The fewer environments you have to use on a regular basis, the more productive you'll be. Not to mention that as a developer you probably spend most of your time on GitHub anyway.

flux-get-started - Getting started with Flux and the Helm Operator

•    Smarty

We published a step-by-step run-through on how to use Flux and Helm Operator over here.

ofc-bootstrap - "one-click" CLI to install OpenFaaS Cloud on Kubernetes

•    Go

You can run ofc-bootsrap against a remote Kubernetes cluster. The instructions below use kind or Kubernetes in Docker to test out the instructions on your local Docker daemon. If you'd like to restrict who can log in to just those who use a GitHub account then create a GitHub OAuth App.

ship - Reducing the Operational Overhead of Maintaining 3rd-party Applications in Kubernetes

•    Go

Replicated Ship is an open source project by Replicated designed to extend Google’s Kustomize project in a way that can reduce the operational overhead of maintaining 3rd party applications (open source or proprietary) deployed to a Kubernetes cluster. The initial release of Replicated Ship exposes the power of Kustomize as an advanced custom configuration management tool for Helm charts, Kubernetes manifests and Knative applications. With Ship, cluster operators can automatically stay in sync with upstream changes (ie. via automated pull requests or another form of automation) while preserving their local, custom configurations and extensions (add, deletes and edits) without git merge conflicts. This is possible because of how the three operating modes of Ship invoke, store and apply Kustomizations made by the cluster operator.

pack - Simple Secure Kubernetes Package Manager

•    Go

Kubepack by AppsCode is a Secure Lightweight Kubernetes Package Manager. To install Pack, please follow the guide here.

terraform-aws-ecs-atlantis - Terraform module for deploying Atlantis as an ECS Task

•    HCL

A Terraform module for deploying Atlantis to an AWS ECS cluster. This project is part of our comprehensive "SweetOps" approach towards DevOps.

gitops-progressive-delivery - Progressive delivery with Istio, Weave Flux and Flagger

Progressive delivery GitOps pipeline with Istio, Prometheus, Weave Flux and Flagger.

gitops-helm - Managing Helm releases with Weave Flux Helm Operator

•    Smarty

GitOps is a way to do Continuous Delivery, it works by using Git as a source of truth for declarative infrastructure and workloads. For Kubernetes this means using git push instead of kubectl create/apply or helm install/upgrade. In a traditional CICD pipeline, CD is an implementation extension powered by the continuous integration tooling to promote build artifacts to production. In the GitOps pipeline model, any change to production must be committed in source control (preferable via a pull request) prior to being applied on the cluster. This way rollback and audit logs are provided by Git. If the entire production state is under version control and described in a single Git repository, when disaster strikes, the whole infrastructure can be quickly restored from that repository.

gitops-istio - GitOps Istio Weave Flux demo

•    Smarty

This is a step by step guide on how to set up a GitOps workflow for Istio with Weave Flux. GitOps is a way to do Continuous Delivery, it works by using Git as a source of truth for declarative infrastructure and workloads. In practice this means using git push instead of kubectl create/apply or helm install/upgrade. Note that Flux Helm Operator works with Kubernetes 1.9 or newer.

k8s-podinfo - Go multi-arch microservice template for Kubernetes

•    Go

Podinfo is a tiny web application made with Go that showcases best practices of running microservices in Kubernetes.

openfaas-flux - OpenFaaS Kubernetes Cluster state management with Weave Flux

•    Smarty

This is a step-by-step guide on how to set up a GitOps workflow for OpenFaaS with Weave Flux. GitOps is a way to do Continuous Delivery, it works by using Git as a source of truth for declarative infrastructure and workloads. In practice this means using git push instead of kubectl create/apply or helm install/upgrade. OpenFaaS (Functions as a Service) is Serverless Functions Made Simple for Docker and Kubernetes. With OpenFaaS you can package any container or binary as a serverless function - from Node.js to Golang to C# on Linux or Windows.

gitops-toolkit - Weave GitOps Toolkit

•    Go

A set of packages to help build Git-backed applications. Weave GitOps Toolkit builds on top of the Kubernetes API Machinery.

deck - decK: Declarative configuration and drift detection for Kong and Kong Enterprise

•    Go

decK is a CLI tool to configure Kong declaratively using a single config file. decK is compatible with Kong 1.x.