Has anyone run EKS Auto Mode with KRO, ACK, and Argo CD in production?
We're using KRO, ACK, and Argo CD on a moderately large platform and are evaluating whether EKS Auto Mode would fit into the setup. I'm especially interested in…
ArgoCD
How can we promote non-secret environment variables across dev, SIT, and UAT with ArgoCD and Helm?
We run EKS with ArgoCD, Helm, and GitLab. Our GitOps repository has separate directories and values files for dev, SIT, and UAT. Secrets are already managed through AWS…
How should non-secret configuration be promoted from dev to SIT and UAT with Argo CD and Helm?
We run EKS with Argo CD, Helm, and GitLab. Our GitOps repository has separate directories and values files for dev, SIT, and UAT. Secrets already live in AWS…
Is a Public EKS API Endpoint Locked to ArgoCD’s NAT IP a Reasonable Compromise?
I run a central ArgoCD instance in EKS and use ApplicationSets to manage several EKS clusters over private networking. One cluster is in a completely separate AWS account…
Is a Public EKS API Endpoint Safe with a Strict IP Allowlist?
I run a central Argo CD instance in EKS using ApplicationSets to manage several EKS clusters over private networking. One additional cluster is in a separate account and…
How can I practice GitOps and ArgoCD with a real external CI pipeline without unexpected cloud costs?
I'm learning Kubernetes and CI/CD, and I'd like to practice a realistic GitOps workflow with ArgoCD and an external CI system such as GitHub Actions. Minikube and Kind…
How can I practice GitOps and ArgoCD with a real external CI pipeline?
I'm learning Kubernetes and CI/CD. Minikube and Kind work well locally, but they aren't publicly reachable, so I can't easily connect an external GitHub Actions workflow or test…
What’s the safest way to apply Kubernetes optimization recommendations?
I'm building an open-source Kubernetes optimization tool that analyzes Prometheus and OpenCost data to identify opportunities such as CPU and memory rightsizing, idle workloads, orphaned load balancers or…
How should I handle concurrent GitOps deployment updates with Kustomize?
I recently started looking into Kustomize to organize application deployments managed through Argo CD. My planned CI flow clones a GitOps repository, changes the image tag in the…
How should a small team handle Kubernetes development environments?
I'm on a three-person team building a prototype AI application: one data scientist and two engineers. Between the engineers, we have roughly a year of combined Python experience.…
How Can a Small Team Develop Efficiently After Moving From Docker Compose to Kubernetes?
I'm on a three-person team building a prototype AI tool: one data scientist and two engineers. Between the two engineers, we have roughly a year of combined Python…
What’s the best way to test CI pipelines and GitOps changes?
How do you verify that a CI pipeline works correctly, including authentication, permissions, runner configuration, and access to services such as source control, cloud providers, container registries, Kubernetes,…
What’s the best way to test CI pipelines and validate GitOps changes?
How do you verify that a CI pipeline works correctly, including authentication, permissions, runner access, builds, security checks, artifact publishing, and deployments? Do you create a small sample…
What’s the Best Way to Run Karpenter on EKS with ArgoCD?
I'm planning to deploy Karpenter on an EKS cluster and want to validate the architecture before moving ahead. The cluster is currently managed with an app-of-apps setup in…
How do I configure Gateway API to re-encrypt traffic to Argo CD without causing a redirect loop?
I'm configuring a Cilium Gateway API route for Argo CD and want HTTPS both from the client to the gateway and from the gateway to the Argo CD…
Best-Practice Architecture for Running Karpenter on EKS
I'm planning to deploy Karpenter on an Amazon EKS cluster and would appreciate feedback on the architecture. We currently use an app-of-apps setup with Argo CD, and everything…
How do I configure Gateway API to re-encrypt traffic to Argo CD without causing a redirect loop?
I'm configuring Cilium Gateway API to expose Argo CD over HTTPS and want encryption on both hops: the client-to-gateway connection and the gateway-to-Argo CD Service connection. TLS passthrough…
Is Argo CD App of Apps overkill for one folder of mixed manifests?
I run a homelab cluster from a single self-hosted Git repository. One directory contains all of my deployments, including plain Kubernetes YAML manifests and Helm values files. Argo…
How do you keep ApplicationSet-generated apps from overwhelming Argo CD’s Applications view?
I'm running an app-of-apps setup in Argo CD where root Applications use an ApplicationSet to create the leaf Applications. Since every generated leaf appears as a top-level Application,…
Advice Needed on Transitioning from Custom CI/CD to ArgoCD, FluxCD, or Rancher Fleet
I'm looking to replace our overly complex in-house CI/CD system with something more sensible, focusing specifically on the continuous deployment aspect. I'm considering main Kubernetes-native solutions like ArgoCD,…