Codefresh Learning Center

All articles

Spinnaker vs Jenkins: 6 Differences, Pros/Cons & How to Choose

What Is Spinnaker? Spinnaker is an open-source, multi-cloud continuous delivery platform developed by Netflix. It releases software changes with high velocity and confidence. Spinnaker supports deploying apps to multiple cloud providers, such as AWS, GCP, and others. It provides a visualization interface for pipelines, which offers a real-time view of deployment progress. The platform’s integrations […]

Read Article >

Managing Terraform Repos with Artifactory: A Practical Guide

What Is Artifactory Terraform Integration? Artifactory Terraform integration enables teams to manage Terraform modules, providers, and backend resources through a centralized repository. By using JFrog Artifactory, users gain a private registry to store and control access to Terraform assets, including modules and providers.  This setup improves control over infrastructure-as-code (IaC) assets by ensuring they are […]

Read Article >

ArgoCD Secrets: Two Technical Approaches, Step By Step

What Is Argo CD? Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. By using Git repositories as the source of truth for Kubernetes cluster configurations, Argo CD automates the deployment of applications. This automation ensures consistency in environments, minimizing human error and manual intervention.  The use of a Git repository allows configurations […]

Read Article >

Kubernetes Secrets: How It Works & 7 Critical Best Practices

What Are Kubernetes Secrets? Secrets store sensitive information, such as passwords, OAuth tokens, and SSH keys, securely inside a Kubernetes cluster. Kubernetes provides an object called Secret that lets you manage secrets separately from the application code, ensuring that they remain confidential and protected against unauthorized access. The Kubernetes Secrets mechanism enables the secure deployment […]

Read Article >

DevSecOps Pipeline: Steps, Challenges, and 5 Critical Best Practices

What Is a DevSecOps Pipeline? A DevSecOps pipeline integrates security practices within the DevOps process, ensuring that applications are secure from development through deployment. It aims to automate security checks and embed security at every step of software development. This approach shifts security left, addressing vulnerabilities early when they are cheaper and easier to fix. […]

Read Article >

DevOps vs DevSecOps: Similarities, Differences & Making the Move

What Is DevOps? DevOps integrates software development and IT operations to automate and streamline processes like building, deploying, and monitoring software. By improving collaboration and leveraging continuous integration and deployment, DevOps accelerates software delivery and enhances reliability, ensuring faster updates, bug fixes, and minimal manual intervention. What Is DevSecOps? DevSecOps integrates security practices into every […]

Read Article >

Argo Security Features, CVEs & Critical Security Practices

What Is Argo CD? Argo CD is an open-source continuous delivery tool for Kubernetes. It automates the deployment of desired application states, defined declaratively, to a Kubernetes cluster. This tool is part of the larger Argo project, which includes a suite of tools for managing Kubernetes applications. Argo CD uses GitOps principles, meaning it views […]

Read Article >

IaC in Kubernetes: 6 Tools, Tutorial and Tips for Success

What Is Infrastructure as Code (IaC)? Infrastructure as code (IaC) manages and provisions computing infrastructure through machine-readable scripts, rather than physical hardware configuration or interactive tools. IaC uses code or configuration files to automate the setup, management, and teardown of infrastructure, making it scalable and repeatable. This approach is integral to DevOps practices, enabling rapid […]

Read Article >

Setup Jenkins on Docker: Windows/Linux Tutorial & Best Practices

What Is Jenkins? Jenkins is an open-source automation server that enables developers to build, test, and deploy their software reliably. The idea behind Jenkins is continuous integration (CI), where developers integrate code into a shared repository several times a day. Each commit prompts an automated build and testing process, making it easier to detect errors […]

Read Article >

Understanding Argo CD Sync Waves with Examples

What Are Argo CD Sync Phases and Waves? Argo CD is a continuous delivery tool that automates software deployments in Kubernetes. Sync phases and waves manage the order and timing of resource application. Sync phases define logical steps during an application deployment, such as pre-sync, sync, and post-sync. Each phase serves a specific purpose, facilitating […]

Read Article >