logologo
Menu
Tickets
Pere Alcoberro

Infrastructure deployments with ArgoCD HA and Crossplane by Pere Alcoberro

Usage of GitOps methodology to deploy Infrastructure as code using Crossplane and ArgoCD:

- Configuration of Crossplane to have rights to deploy infra from one tooling cluster to the rest of the target Accounts

- Implementation new Infrastructure Kompositions in order to deploy Infrastructure as CRD’s.

- Lifecycle of this kompositions and deployment of the Infrastructure as separate tenants.

- Limitations during the maintenance of this methodology

- Roadmap for the evolution of this toolset.

Talk Questions

      
  • Question 797
    Did you evaluate terraform k8s operator before choosing crossplane? Whats your take on using that instead of crossplane ?
  • Question 796
    A infraestructure resource deployed by this method, should to be refered to the lifecycle of the workload, or can be a crosshared resource for any other applications that maybe runs in other clusters? example, an application gateway
  • Question 800
    Was Flux an option instead of ArgoCD? If so, why did you decide for ArgoCD?
  • Question 801
    Oversimplifying, you replaced the terraform stacks with their state with an argoCD k8s cluster?
  • Question 795
    What complexities did you face that made you move out from terraform to crossplane?
  • Question 792
    Are enough Upbound providers? Or do you need the terraform generic provider?
  • Question 794
    Can you check the drift between the cloud provider and crs config?
  • Question 798
    Crossplane expands artifacts in the cluster, do you make backups of the etcd? And if so, do you use a tool like velero?
  • Question 793
    What are our options to ensure compliance requirements in the deployments of infrastructure (for example RDS requiring encryption in transit, or S3 and object encryption, and not die in the attempt? How that complexity can be abstracted to our users?
  • Question 799
    Do you configure with automatic prune the Argo Apps?
  • Question 802
    Can we use ansible language in ArgoCD deploys?
  • Question 803
    You mentioned unexpected breaking changes in Crossplane. Aren't they following semver?
  • Question 804
    Regarding issue "when argocd stuck, both apps and infra are stuck". Have you considered separating argocd instances for apps and infra?
  • Question 805
    About ArgoCD, how do you manage image tags with argo imageupdater? How do you increase image tags versions?