ArgoCD in 2026: Why 60% of Kubernetes Teams Choose It for GitOps

1# CI pipeline pushes to cluster - requires distributed credentials
2kubectl apply -f manifests/ --kubeconfig=$KUBE_CONFIG

1# ArgoCD pulls from Git - no external credentials needed
2apiVersion: argoproj.io/v1alpha1
3kind: Application
4metadata:
5  name: my-app
6spec:
7  source:
8    repoURL: https://github.com/org/repo.git
9    path: manifests/
10  destination:
11    server: https://kubernetes.default.svc

1apiVersion: argoproj.io/v1alpha1
2kind: Application
3metadata:
4  name: frontend
5  namespace: argocd
6spec:
7  # Which ArgoCD project (for RBAC)
8  project: default
9
10  # Where to get manifests
11  source:
12    repoURL: https://github.com/buun-group/frontend.git
13    targetRevision: HEAD
14    path: k8s/
15
16  # Where to deploy
17  destination:
18    server: https://kubernetes.default.svc
19    namespace: frontend
20
21  # Automation settings
22  syncPolicy:
23    automated:
24      prune: true      # Delete resources removed from Git
25      selfHeal: true   # Revert manual kubectl changes
26    syncOptions:
27      - CreateNamespace=true

1syncPolicy:
2  automated:
3    prune: true           # Remove resources not in Git
4    selfHeal: true        # Auto-revert manual changes
5    allowEmpty: false     # Prevent empty deployments
6
7  syncOptions:
8    - CreateNamespace=true
9    - PrunePropagationPolicy=foreground
10    - PruneLast=true
11    - ApplyOutOfSyncOnly=true
12
13  retry:
14    limit: 5
15    backoff:
16      duration: 5s
17      factor: 2
18      maxDuration: 3m

1apiVersion: argoproj.io/v1alpha1
2kind: ApplicationSet
3metadata:
4  name: microservices
5  namespace: argocd
6spec:
7  goTemplate: true
8  generators:
9    # Generate app for each directory in services/
10    - git:
11        repoURL: https://github.com/buun-group/gitops.git
12        revision: HEAD
13        directories:
14          - path: services/*
15
16  template:
17    metadata:
18      name: '{{.path.basename}}'
19    spec:
20      project: default
21      source:
22        repoURL: https://github.com/buun-group/gitops.git
23        path: '{{.path.path}}'
24      destination:
25        server: https://kubernetes.default.svc
26        namespace: '{{.path.basename}}'
27      syncPolicy:
28        automated:
29          prune: true
30          selfHeal: true

1# Add external cluster
2argocd cluster add production-cluster-context
3
4# List managed clusters
5argocd cluster list
6# SERVER                          NAME        VERSION  STATUS
7# https://kubernetes.default.svc  in-cluster  1.28     Successful
8# https://prod.k8s.example.com    production  1.28     Successful

1# ApplicationSet for multi-cluster deployment
2apiVersion: argoproj.io/v1alpha1
3kind: ApplicationSet
4metadata:
5  name: multi-cluster-app
6spec:
7  generators:
8    - clusters:
9        selector:
10          matchLabels:
11            tier: production
12  template:
13    metadata:
14      name: 'app-{{.name}}'
15    spec:
16      destination:
17        server: '{{.server}}'
18        namespace: my-app

1# PreSync Hook: Database migration before deployment
2apiVersion: batch/v1
3kind: Job
4metadata:
5  name: db-migrate
6  annotations:
7    argocd.argoproj.io/hook: PreSync
8    argocd.argoproj.io/hook-delete-policy: HookSucceeded
9spec:
10  template:
11    spec:
12      containers:
13        - name: migrate
14          image: my-app:migrate
15          command: ["./migrate.sh"]
16      restartPolicy: Never
17---
18# PostSync Hook: Smoke tests after deployment
19apiVersion: batch/v1
20kind: Job
21metadata:
22  name: smoke-tests
23  annotations:
24    argocd.argoproj.io/hook: PostSync
25    argocd.argoproj.io/hook-delete-policy: HookSucceeded
26spec:
27  template:
28    spec:
29      containers:
30        - name: test
31          image: my-app:test
32          command: ["./smoke-test.sh"]
33      restartPolicy: Never

1# Root Application manages all other Applications
2apiVersion: argoproj.io/v1alpha1
3kind: Application
4metadata:
5  name: production-apps
6  namespace: argocd
7spec:
8  project: default
9  source:
10    repoURL: https://github.com/buun-group/gitops.git
11    path: apps/production/  # Contains Application manifests
12  destination:
13    server: https://kubernetes.default.svc
14    namespace: argocd
15  syncPolicy:
16    automated:
17      prune: true
18      selfHeal: true

1gitops-repo/
2├── apps/
3│   └── production/
4│       ├── frontend.yaml      # Application CRD
5│       ├── backend.yaml       # Application CRD
6│       ├── database.yaml      # Application CRD
7│       └── monitoring.yaml    # Application CRD
8└── manifests/
9    ├── frontend/
10    ├── backend/
11    ├── database/
12    └── monitoring/

1apiVersion: argoproj.io/v1alpha1
2kind: AppProject
3metadata:
4  name: team-frontend
5  namespace: argocd
6spec:
7  description: Frontend team's project
8
9  # Allowed source repositories
10  sourceRepos:
11    - 'https://github.com/buun-group/frontend-*'
12
13  # Allowed deployment targets
14  destinations:
15    - namespace: 'frontend-*'
16      server: https://kubernetes.default.svc
17
18  # Allowed cluster resources
19  clusterResourceWhitelist:
20    - group: ''
21      kind: Namespace
22
23  # Team roles
24  roles:
25    - name: frontend-admin
26      policies:
27        - p, proj:team-frontend:frontend-admin, applications, *, team-frontend/*, allow
28      groups:
29        - frontend-team-github-group

1# argocd-cm ConfigMap
2apiVersion: v1
3kind: ConfigMap
4metadata:
5  name: argocd-cm
6  namespace: argocd
7data:
8  url: https://argocd.buun.io
9  dex.config: |
10    connectors:
11      - type: github
12        id: github
13        name: GitHub
14        config:
15          clientID: $github-client-id
16          clientSecret: $github-client-secret
17          orgs:
18            - name: buun-group

1gitops-repo/
2├── apps/                    # ArgoCD Applications
3│   ├── base/
4│   └── overlays/
5│       ├── dev/
6│       ├── staging/
7│       └── production/
8├── manifests/               # Kubernetes manifests
9│   ├── frontend/
10│   │   ├── base/
11│   │   └── overlays/
12│   └── backend/
13├── clusters/                # Cluster-specific configs
14│   ├── dev-cluster/
15│   └── prod-cluster/
16└── argocd/                  # ArgoCD self-management
17    ├── applications/
18    └── projects/

1apiVersion: external-secrets.io/v1beta1
2kind: ExternalSecret
3metadata:
4  name: api-keys
5spec:
6  secretStoreRef:
7    name: vault
8    kind: ClusterSecretStore
9  target:
10    name: api-keys
11  data:
12    - secretKey: api-key
13      remoteRef:
14        key: secret/my-app/api-key

1# Encrypt secret client-side
2kubeseal --format yaml < secret.yaml > sealed-secret.yaml
3# Commit sealed-secret.yaml to Git (safe!)

1apiVersion: argoproj.io/v1alpha1
2kind: AppProject
3spec:
4  syncWindows:
5    # Allow syncs only during business hours
6    - kind: allow
7      schedule: '0 9-17 * * 1-5'  # Mon-Fri 9am-5pm
8      duration: 8h
9      applications:
10        - '*'
11    # Deny syncs during peak traffic
12    - kind: deny
13      schedule: '0 12 * * *'  # Noon daily
14      duration: 2h
15      applications:
16        - 'production-*'

1# Multiple API server replicas
2apiVersion: apps/v1
3kind: Deployment
4metadata:
5  name: argocd-server
6spec:
7  replicas: 3  # HA mode
8---
9# Redis HA with Sentinel
10apiVersion: apps/v1
11kind: StatefulSet
12metadata:
13  name: argocd-redis-ha
14spec:
15  replicas: 3

1apiVersion: v1
2kind: ConfigMap
3metadata:
4  name: argocd-notifications-cm
5data:
6  service.slack: |
7    token: $slack-token
8
9  trigger.on-sync-failed: |
10    - when: app.status.sync.status == 'Failed'
11      send: [app-sync-failed]
12
13  template.app-sync-failed: |
14    slack:
15      attachments: |
16        [{
17          "title": "{{.app.metadata.name}} sync failed",
18          "color": "#E96D76",
19          "fields": [{
20            "title": "Repository",
21            "value": "{{.app.spec.source.repoURL}}"
22          }]
23        }]

1# Create namespace
2kubectl create namespace argocd
3
4# Install ArgoCD
5kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
6
7# Get initial admin password
8argocd admin initial-password -n argocd
9
10# Access UI (port-forward for testing)
11kubectl port-forward svc/argocd-server -n argocd 8080:443
12# Open https://localhost:8080

1# Login to ArgoCD
2argocd login localhost:8080
3
4# Create application
5argocd app create my-app \
6  --repo https://github.com/your-org/your-app.git \
7  --path k8s/ \
8  --dest-server https://kubernetes.default.svc \
9  --dest-namespace my-app
10
11# Sync application
12argocd app sync my-app

1apiVersion: argoproj.io/v1alpha1
2kind: Application
3metadata:
4  name: my-app
5  namespace: argocd
6spec:
7  project: default
8  source:
9    repoURL: https://github.com/your-org/your-app.git
10    path: k8s/
11  destination:
12    server: https://kubernetes.default.svc
13    namespace: my-app
14  syncPolicy:
15    automated:
16      prune: true
17      selfHeal: true