What should I be aware of when adopting pipelines as code with GitOps?
Asked by
TechNinja9000
I'm considering transitioning our CI/CD processes to a GitOps model, where we handle both application and infrastructure changes through pull requests, using declarative configurations, and implementing reviews and auto-promotions. I'm curious about potential pitfalls to avoid, such as repo sprawl, managing secrets and ephemeral credentials, the risk of drift between the pipeline runner and cluster, issues with flaky approvals, maintaining proper hygiene during environment promotions, and the complexity of rollbacks. Additionally, I'd appreciate any insights on tooling options (like Argo CD, Flux, Tekton, or GitHub Actions), managing environment-specific overlays, and ensuring our pipelines remain testable and versioned without hampering team productivity.
Answers
In my experience with Azure DevOps, I create a pipeline that generates other pipelines, consolidating all definitions in one repo. One drawback is that the Azure DevOps repository doesn't allow for defining PR auto triggers in code, so I have to set each repository policy manually.
Reply to this answer
Watch out for repo sprawl and the challenges that come with managing secrets. Using Argo CD can be beneficial because of its declarative nature, and Tekton offers great flexibility. Keeping an eye on these areas will help ensure a smoother transition.
Reply to this answer
A key lesson I learned is to keep your infrastructure configuration separate from your application code. It helps mitigate some of the complexities.
Reply to this answer
If you're handling complex projects, the continuous deployment features in GitHub may not cover all your needs. In that case, consider using a dedicated tool like Argo CD or Kargo for better control.
Reply to this answer
What exact issues are you looking to resolve with this GitOps approach? Clarifying your goals might help in identifying potential hurdles ahead.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions