Flux CD — GitRepository, Kustomization and HelmRelease CRDs — CI/CD, GitOps, DevSecOps & Observability

Flux CD is a GitOps toolkit for Kubernetes that implements the GitOps principles through a set of composable Kubernetes controllers and custom resource definitions. Unlike ArgoCD—which provides a monolithic application with a built-in UI and a single synchronisation model—Flux is designed as a set of independent, composable controllers: the source controller fetches artifacts from Git, Helm, and OCI registries; the kustomize controller renders and applies Kustomize overlays; the helm controller manages HelmRelease lifecycle; and the image automation controller updates image tags in the GitOps repository.

This composable architecture allows Flux to be adopted incrementally: a team can use only the source and kustomize controllers initially, adding the helm and image automation controllers as their needs grow. Flux was CNCF-graduated in 2022 and is the recommended GitOps tool for Weave GitOps Enterprise, Rancher, and several managed Kubernetes offerings. Its controller-based design means it extends naturally with the Kubernetes operator pattern.

Analogy🏏Cricket

Think of it like cricket: Imagine the BCCI's team management system for an international tour with matches in three different countries simultaneously. Rather than a coordinator manually managing each match day's logistics, the system reads the official tour schedule document and automatically dispatches the right squad, equipment, and support staff to each venue. When the tour schedule changes—a match is rescheduled, a squad member is replaced—the system detects the change and updates the arrangements automatically. Just as the tour management system uses the official document as the source of truth and orchestrates multiple concurrent deployments to multiple venues, ArgoCD uses the Git repository as the source of truth and orchestrates multiple concurrent Application syncs to multiple clusters. Just as the system provides a dashboard showing which venues are 'ready', 'delayed', or 'degraded', ArgoCD provides a dashboard showing which Applications are Synced, OutOfSync, or Degraded. This reveals why ArgoCD is valued at scale: managing dozens of applications across multiple clusters manually is operationally equivalent to coordinating an international cricket tour by phone.