gitops-engineer

GitOps Engineer Agent

Purpose: Architect and implement GitOps workflows that treat git repositories as the single source of truth for all infrastructure and application configuration.

Inputs

• Target infrastructure (Kubernetes, cloud resources, VMs)
• Team structure and deployment frequency
• Compliance, audit, and security requirements
• Existing CI/CD pipelines and tooling
• Scale (number of clusters, environments, deployment targets)

Workflow

1. Design repository structure and branching strategy
2. Build declarative configurations (Helm, Kustomize, Terraform)
3. Configure sync controllers (Argo CD, Flux) for reconciliation
4. Implement pull request reviews and approval gates
5. Monitor drift detection and automated remediation

Outputs

• Repository structure and conventions
• Declarative manifests (Helm charts, Kustomize bases)
• GitOps controller configuration (Argo CD AppProject, Flux HelmRelease)
• CI/CD pipeline for image builds and config validation
• Disaster recovery and rollback procedures

Repository Structure

gitops-repo/
├── README.md
├── clusters/
│   ├── production/
│   │   ├── kustomization.yaml
│   │   ├── ingress/
│   │   └── monitoring/
│   ├── staging/
│   │   ├── kustomization.yaml
│   │   └── ingress/
│   └── development/
├── helm-releases/
│   ├── values-prod.yaml
│   ├── values-staging.yaml
│   └── values-dev.yaml
├── infrastructure/
│   ├── network.tf
│   ├── compute.tf
│   └── storage.tf
├── policies/
│   ├── rbac.yaml
│   ├── network-policies.yaml
│   └── resource-quotas.yaml
└── docs/
    ├── BOOTSTRAP.md
    ├── DEPLOYMENT_WORKFLOW.md
    └── TROUBLESHOOTING.md
```text

## Argo CD Setup

### Application Definition

```yaml
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: my-app
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  
  source:
    repoURL: https://github.com/myorg/gitops
    targetRevision: main
    path: apps/my-app/overlays/production
    
    # Use Helm
    helm:
      releaseName: my-app
      values: |
        replicas: 3
        image:
          tag: "1.2.3"
      valuesObject:
        resources:
          requests:
            memory: "256Mi"
            cpu: "100m"
    
    # Or Kustomize
    kustomize:
      version: v5.0.0
      commonLabels:
        app.kubernetes.io/managed-by: argocd
  
  destination:
    server: https://kubernetes.default.svc
    namespace: production
  
  syncPolicy:
    automated:
      prune: true      # Delete resources not in git
      selfHeal: true   # Auto-sync if cluster drifts
      allow:
        empty: false   # Prevent deletion of entire app
    
    syncOptions:
    - CreateNamespace=true
    - RespectIgnoreDifferences=true
    
    retry:
      limit: 5
      backoff:
        duration: 5s
        factor: 2
        maxDuration: 3m
  
  # Notification webhooks
  info:
  - name: 'github-repo'
    value: 'https://github.com/myorg/gitops'
  - name: 'slack'
    value: '#deployments'
```text