AWS prescriptive-guidance documentation change
Summary
Reformatted Argo CD capabilities table into a bulleted list and updated image path
Security assessment
The changes are purely presentational: converting a table to a bulleted list and updating an image path. The security-related content about RBAC and SSO remains unchanged with no new security information added. No vulnerability fixes or security enhancements are mentioned.
Diff
diff --git a/prescriptive-guidance/latest/eks-gitops-tools/argo-cd.md b/prescriptive-guidance/latest/eks-gitops-tools/argo-cd.md index 968e28988..127788d10 100644 --- a//prescriptive-guidance/latest/eks-gitops-tools/argo-cd.md +++ b//prescriptive-guidance/latest/eks-gitops-tools/argo-cd.md @@ -15,14 +15,26 @@ Argo CD is a widely used GitOps continuous delivery (CD) tool for Kubernetes tha -Area | Tool capabilities ----|--- -Declarative configuration | Argo CD uses declarative configurations that are stored in Git repositories. The desired state of the application and infrastructure is defined in YAML files. These configurations describe what should be deployed, not how to deploy them. -Version control system as the single source of truth | Git repositories serve as the single source of truth for the entire system. All changes to the application and infrastructure are made through Git. This ensures a complete audit trail and the ability to roll back to any previous state. -Automated synchronization | Argo CD continuously monitors the Git repository for changes. When changes are detected, it automatically synchronizes the actual state of the cluster with the desired state that's defined in Git. This ensures that the cluster always reflects the state that's described in the repository. -Kubernetes-native | Argo CD is designed specifically for Kubernetes environments. It leverages the declarative nature and custom resources in Kubernetes for managing applications. -Self-healing and drift detection | Argo CD regularly compares the live state of the cluster with the desired state in Git. If it detects any drift (differences between the actual and desired states), it can automatically correct these discrepancies. -Multi-cluster and multi-tenancy support | Argo CD can manage multiple Kubernetes clusters from a single instance. It supports multi-tenancy, so different teams can manage their applications independently. -Application definition | Applications in Argo CD are defined by using the Application CRD (custom resource definition). This allows for a Kubernetes-native way of defining what should be deployed and how. -Separation of deployment and release | Argo CD separates the deployment of code from its release to users. This is achieved through various deployment strategies such as blue/green or canary deployments. -Observability and auditability | Argo CD provides a web UI and CLI for observing the state of applications and clusters. All actions are logged to provide a clear audit trail of changes and deployments. -Security and RBAC | Argo CD integrates with Kubernetes role-based access control (RBAC). It supports single sign-on integration for authentication and authorization. -Pluggable architecture | Argo CD supports various source control management systems, Helm charts, Kustomize, and other Kubernetes manifest formats. This flexibility allows it to fit into diverse environments and workflows. -Continuous delivery (CD) | Although Argo CD focuses on continuous delivery, it can be integrated with continuous integration (CI) tools to create a complete CI/CD pipeline. + * **Declarative configuration** : Argo CD uses declarative configurations that are stored in Git repositories. The desired state of the application and infrastructure is defined in YAML files. These configurations describe what should be deployed, not how to deploy them. + + * **Version control system as the single source of truth** : Git repositories serve as the single source of truth for the entire system. All changes to the application and infrastructure are made through Git. This ensures a complete audit trail and the ability to roll back to any previous state. + + * **Automated synchronization** : Argo CD continuously monitors the Git repository for changes. When changes are detected, it automatically synchronizes the actual state of the cluster with the desired state that's defined in Git. This ensures that the cluster always reflects the state that's described in the repository. + + * **Kubernetes-native** : Argo CD is designed specifically for Kubernetes environments. It leverages the declarative nature and custom resources in Kubernetes for managing applications. + + * **Self-healing and drift detection** : Argo CD regularly compares the live state of the cluster with the desired state in Git. If it detects any drift (differences between the actual and desired states), it can automatically correct these discrepancies. + + * **Multi-cluster and multi-tenancy support** : Argo CD can manage multiple Kubernetes clusters from a single instance. It supports multi-tenancy, so different teams can manage their applications independently. + + * **Application definition** : Applications in Argo CD are defined by using the Application CRD (custom resource definition). This allows for a Kubernetes-native way of defining what should be deployed and how. + + * **Separation of deployment and release** : Argo CD separates the deployment of code from its release to users. This is achieved through various deployment strategies such as blue/green or canary deployments. + + * **Observability and auditability** : Argo CD provides a web UI and CLI for observing the state of applications and clusters. All actions are logged to provide a clear audit trail of changes and deployments. + + * **Security and RBAC** : Argo CD integrates with Kubernetes role-based access control (RBAC). It supports single sign-on integration for authentication and authorization. + + * **Pluggable architecture** : Argo CD supports various source control management systems, Helm charts, Kustomize, and other Kubernetes manifest formats. This flexibility allows it to fit into diverse environments and workflows. + + * **Continuous delivery (CD)** : Although Argo CD focuses on continuous delivery, it can be integrated with continuous integration (CI) tools to create a complete CI/CD pipeline. + + + @@ -40 +52 @@ The following diagram illustrates a GitOps-driven CD workflow that uses Argo CD - +