Secure Multi-Tenant GitOps Application & Infrastructure Rollouts At Adobe
summary
Adobe builds a GitOps flow that provisions cloud infra and apps from Git using Crossplane + Argo, Argo Rollouts for advanced deploys and OPA Gatekeeper for policy. A hub-and-spoke control plane maps tenant Hub namespaces to tenant AWS provider configs so infra claims in a repo create real S3/RDS/etc. resources; a tooling step auto-generates compositions instead of hand authoring hundreds of CRDs. Internal survey shows ~90% want templates and ~2/3 want GitHub workflow integration; ~1,000 CRDs initially causes latency that Kubernetes fixes (0.24+) largely mitigate.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:28GitOps infrastructure pain points
- 8:32Hub and spoke model
- 10:41Argo for secure deployments
- 14:54Crossplane concepts
- 18:28Crossplane and Argo workflow
- 23:05Multi-tenancy security deep dive
- 33:44Developer experience challenges
related talks
26mScaling a GitOps Platform at Adobe
07mGitOps based CI/CD
30mGitOpsifying Cloud Infra with Crossplane, ArgoCD
22mHarder, Better, Faster, Stronger Pipelines @ Adobe
27mGitOpsify Everything: When Crossplane Meets Argo CD
17mUsing GitOps for Both Infrastructure and Applications
43mGitOps at Scale with and Argo CD on
33mGitOps in Modern Security-Compliant Environments