Codefresh Learning Center

All articles

GitLab GitOps: The Basics and a Quick Tutorial

What Is GitLab? GitLab is an all-in-one DevSecOps platform that provides source code management (SCM), continuous integration/continuous deployment (CI/CD), and security features within a single application. It enables teams to collaborate on software development, automate workflows, and manage infrastructure.  GitLab supports cloud-native, multi-cloud, and on-premise deployments. With built-in Git-based version control, GitLab allows developers to […]

Read Article >

Harness GitOps: The Basics and a Quick Tutorial

What Is Harness CD? Harness Continuous Delivery (CD) is a cloud-native deployment platform that simplifies software delivery without requiring scripts. It supports multiple deployment strategies, including canary, blue-green, and rolling deployments. Harness CD integrates with infrastructure provisioning tools like Terraform and AWS CDK, enabling efficient creation of short-lived environments. The platform includes AI-powered deployment verification, […]

Read Article >

5 Types of Kubernetes Autoscaling, Pros/Cons & Advanced Methods

What Is Kubernetes Autoscaling?  Kubernetes autoscaling is the process of automatically adjusting resources in a Kubernetes cluster to match application demand. It helps optimize resource usage by scaling pods, nodes, or resource allocations up or down based on real-time metrics or predefined conditions. By automating this process, Kubernetes ensures that applications maintain high availability and […]

Read Article >

Spinnaker vs Jenkins: 6 Differences, Pros/Cons & How to Choose

What Is Spinnaker? Spinnaker is an open-source, multi-cloud continuous delivery platform developed by Netflix. It releases software changes with high velocity and confidence. Spinnaker supports deploying apps to multiple cloud providers, such as AWS, GCP, and others. It provides a visualization interface for pipelines, which offers a real-time view of deployment progress. The platform’s integrations […]

Read Article >

Managing Terraform Repos with Artifactory: A Practical Guide

What Is Artifactory Terraform Integration? Artifactory Terraform integration enables teams to manage Terraform modules, providers, and backend resources through a centralized repository. By using JFrog Artifactory, users gain a private registry to store and control access to Terraform assets, including modules and providers.  This setup improves control over infrastructure-as-code (IaC) assets by ensuring they are […]

Read Article >

ArgoCD Secrets: Two Technical Approaches, Step By Step

What Is Argo CD? Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. By using Git repositories as the source of truth for Kubernetes cluster configurations, Argo CD automates the deployment of applications. This automation ensures consistency in environments, minimizing human error and manual intervention.  The use of a Git repository allows configurations […]

Read Article >

Kubernetes Secrets: How It Works & 7 Critical Best Practices

What Are Kubernetes Secrets? Secrets store sensitive information, such as passwords, OAuth tokens, and SSH keys, securely inside a Kubernetes cluster. Kubernetes provides an object called Secret that lets you manage secrets separately from the application code, ensuring that they remain confidential and protected against unauthorized access. The Kubernetes Secrets mechanism enables the secure deployment […]

Read Article >

DevSecOps Pipeline: Steps, Challenges, and 5 Critical Best Practices

What Is a DevSecOps Pipeline? A DevSecOps pipeline integrates security practices within the DevOps process, ensuring that applications are secure from development through deployment. It aims to automate security checks and embed security at every step of software development. This approach shifts security left, addressing vulnerabilities early when they are cheaper and easier to fix. […]

Read Article >

DevOps vs DevSecOps: Similarities, Differences & Making the Move

What Is DevOps? DevOps integrates software development and IT operations to automate and streamline processes like building, deploying, and monitoring software. By improving collaboration and leveraging continuous integration and deployment, DevOps accelerates software delivery and enhances reliability, ensuring faster updates, bug fixes, and minimal manual intervention. What Is DevSecOps? DevSecOps integrates security practices into every […]

Read Article >

Argo Security Features, CVEs & Critical Security Practices

What Is Argo CD? Argo CD is an open-source continuous delivery tool for Kubernetes. It automates the deployment of desired application states, defined declaratively, to a Kubernetes cluster. This tool is part of the larger Argo project, which includes a suite of tools for managing Kubernetes applications. Argo CD uses GitOps principles, meaning it views […]

Read Article >