Hands-On Microservices with Kubernetes

Hardening your toolchain

Delinkcious is pretty well-contained. The main tool it uses is Argo CD. Argo CD, which can potentially cause a lot of damage, is running inside the cluster and pulls from GitHub. However, it has a lot of permissions. Before I decided to use Argo CD as the continuous delivery solution for Delinkcious, I reviewed it seriously from a security perspective. The Argo CD developers did a great job of thinking how to make Argo CD secure. They made sensible choices, implemented them, and documented how to run Argo CD securely. Here are the security features that Argo CD provides:

• Authentication of the admin user via JWT tokens
• Authorization via RBAC
• Secure communication over HTTPS
• Secret and credential management
• Audits