Helm is the package manager for Kubernetes. It packages a set of Kubernetes manifests into a chart, parameterised by values, that can be installed, upgraded, rolled back, and shared via repositories. Helm charts are the standard distribution format for installable Kubernetes applications.

Core concepts

  • Chart. A directory of YAML templates, a values.yaml, and metadata (Chart.yaml) describing…
Pipeline

A pipeline is the automated sequence of stages a code change passes through on its way from a developer's commit to production. Modern CI/CD pipelines codify build, test, security scan, package, and deploy steps so every change moves through the same checks in the same order.

Typical stages

  1. Source. Triggered by a commit, tag, or pull request from the version control system.
  2. Build.…
Feature Flag

A feature flag (also called a feature toggle) is a runtime switch that turns a code path on or off without deploying new code. Flags let teams decouple deploy from release, ship dark, run experiments, and roll back broken features without rolling back binaries.

Common kinds of flags

  • Release flags. Gate a new feature; flip on when ready to ship.
  • Experiment flags. Route users to A/B…

Canary Deployment is a release strategy that routes a small fraction of traffic to a new version first, observes its behaviour against the old version, and gradually expands the new version's share if metrics stay healthy. The name comes from "canary in a coal mine": the small early group surfaces problems before the rest of the population is exposed.

How it works

  1. Deploy the new version…

Blue-Green Deployment is a release strategy that maintains two identical production environments and switches all traffic from one to the other when a new version is ready. The currently live environment is "blue"; the new version is staged in "green"; when green is verified, a single traffic switch makes green live and blue idle (and available as instant rollback).

How it works

Two complete…

ArgoCD is an open-source declarative continuous-delivery tool for Kubernetes that runs inside the cluster and applies manifests from a Git repository. It is the most widely deployed GitOps controller in the Kubernetes ecosystem.

How it works

An Application object in ArgoCD points at a Git repo, a path inside it, and a target cluster and namespace. ArgoCD continuously compares the manifests in…

Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable

A critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and gain access to secrets, according to researchers with cybersecurity firm Tenable. In an advisory issued April 21, Rémy Marot, staff research engineer at Tenable, wrote that “by […]

Page 1