Flux

Everything is controlled through pull requests. Git history provides a sequence of transactions allowing recovery from any snapshot.

Push to Git and Flux does the rest. Flux can push back to Git with automated container image updates including image scanning and patching.

Works with Cluster API to manage apps in same or other clusters, spin up additional clusters, and manage cluster lifecycle and fleets.

Thriving ecosystem of integrations and products with great dashboards for monitoring and management.

Deploy apps with canaries, feature flags, and A/B rollouts. Manage any Kubernetes resource with infrastructure and workload dependency management built in.

Integration with Flagger for progressive delivery including canaries, feature flags, and A/B rollouts.

Describe entire desired state of system in Git including apps, configuration, dashboards, and monitoring. YAML enforces conformance to declared system with automatic syncing.

Uses true Kubernetes RBAC via impersonation and supports multiple Git repositories with multi-cluster infrastructure.

Send notifications to Slack and other chat systems for deployment events.

Support for OPA, Kyverno, and admission controllers for policy enforcement.

Ability to operate Flux in air-gapped environments for compliance and security requirements.

Full Kubernetes RBAC integration for access control.

Pull vs. Push architecture, least privilege access, adherence to Kubernetes security policies, and tight integration with security tools and best-practices.