@securityonline.bsky.socialFour critical Argo CD vulnerabilities, including AppProject bypass CVE-2026-77459, threaten the repo-server and clusters. Upgrade to v3.5.4 now.
#ArgoCD #Kubernetes #GitOps #CVE202677459 #Kustomize #Jsonnet #DevSecOps #Vulnerability
@adegoodyer.comPipeline shapes, Freight sourcing, repository strategies and reusable promotion logic in Kargo.
#kargo #argo-cd #gitops #kustomize #helm
https://stdout.adegoodyer.com/posts/promotion-patterns/
@hugovalters.bsky.socialIsolate dev/staging/prod with Kustomize transformers: commonLabels adds labels to resources AND selectors, namePrefix prefixes names, namespace sets them. One https://www.valtersit.com/vault/common-labels-and-name-prefix-for-multienvironment-isolation-1f04a9/
#kubernetes #kustomize #devops
@hugovalters.bsky.socialSwap image tags across all Kubernetes manifests with one command: kustomize edit set image my-app=registry/my-app:1.2.3. No manual YAML edits.
https://www.valtersit.com/vault/dynamic-image-replacement-with-kustomize-edit-set-image-d7627d/
#kubernetes #kustomize #devops
@hugovalters.bsky.socialKustomize remote bases: pin a Git repo to an exact commit SHA with ?ref= for reproducible builds. Lock infra to a known revision. https://www.valtersit.com/vault/remote-base-from-git-repository-with-specific-commit-9add8e/ #kubernetes #kustomize #devops
@hugovalters.bsky.socialPipe kustomize build into kubeconform to validate rendered K8s manifests against JSON schemas. Catches bad fields, type mismatches, missing required https://www.valtersit.com/vault/validate-manifests-with-kubeconform-and-kustomize-build-71fbeb/ #kubernetes #kustomize #ValtersIT
@hugovalters.bsky.socialKustomize patchesJson6902 modifies Custom Resource instances via add, remove, replace, move, copy, test ops. Needs exact field paths unlike strategic merge. https://www.valtersit.com/vault/json6902-patch-for-custom-resource-modification-0e3d04/ #kubernetes #kustomize #json6902
@hugovalters.bsky.socialKustomize multi-tenant overlay: base app plus per-tenant namespace, ResourceQuota for CPU/memory, and NetworkPolicy to restrict https://www.valtersit.com/vault/multitenant-overlay-with-resourcequota-and-networkpolicy-acb642/ #kubernetes #kustomize #multi-tenancy