Automatic Deployment: the GitOps cheat sheet

Nobody should type kubectl apply against production. This sheet shows the setup where nobody has to: CI builds and tags the image, a commit says what should run, Argo CD makes the cluster match, and the passwords and certificates take care of themselves.

What is inside

• The whole flow on one board: git push, CI, registry, GitOps repo, Argo CD, Kubernetes, with External Secrets and cert-manager feeding the cluster
• Six rules that keep deploys boring, from immutable tags to "rollback is git revert"
• The pipeline: a GitHub Actions workflow that tests, builds, scans with Trivy and commits the new tag, with the board pointing at the lines that matter
• Argo CD: an Application with auto sync, the app of apps, the eight CLI commands you will use and what the two statuses mean
• Secrets and TLS: a Vault store, an ExternalSecret, a Let's Encrypt issuer and the one Ingress annotation
• Rollouts and fixes: a rollout that cannot take the site down, and seven symptoms with the first command for each

How to use it

Six A4 pages in the dark whiteboard look of the videos, made for a screen or a tablet next to your terminal. The YAML uses made-up names (acme, shop); swap in yours. Every snippet was checked against the current docs of each tool.