GitOps Workshop – Overview
Overview
This workshop covers the path from fundamentals to advanced platform operations and security hardening. Its structure follows the Kubernetes workshop: reference documents, four workshop levels, exercises, assessments, solutions, official sources and 31 practical examples.
The focus is realistic GitOps practice:
- understand and apply OpenGitOps principles
- explain desired state, actual state, drift and reconciliation
- classify Git, Kustomize, Helm, Argo CD and Flux correctly
- design repository structures for environments, teams and clusters
- control promotion, rollback, sync waves, health, diff and status
- assess secrets, RBAC, AppProjects, policies, signatures and supply chain
- structure incident response for drift, failed syncs and secret leaks
Quickstart
# Workshop content is provided through the Orthevs Academy.
chmod +x scripts/provision_gitops.sh
./scripts/provision_gitops.sh --dry-run
Then check local tooling:
git --version
kubectl version --client || true
kustomize version || true
helm version || true
Learning Path
| Level | Focus | Workshop | Exercises | Assessment |
|---|---|---|---|---|
| 01 | Fundamentals | Fundamentals Workshop | Fundamentals Exercises | Fundamentals Assessment |
| 02 | Intermediate | Intermediate Workshop | Intermediate Exercises | Intermediate Assessment |
| 03 | Professional | Professional Workshop | Professional Exercises | Professional Assessment |
| 04 | Advanced Security | Advanced Security Workshop | Advanced Security Exercises | Advanced Security Assessment |
Documentation
Examples
The examples are listed in examples/README.md. Every example contains a main description, a German detail page, an English detail page, validatable artifacts and a run.sh that creates a local GitOps lab under work/.
Security Rule
GitOps makes changes traceable, but not automatically safe. Secrets, controller permissions, repository access, signatures and policy gates must be designed deliberately. Do not use real tokens, production cluster kubeconfigs or real secret values in this workshop.
Official Sources and Scope
The material is aligned with public GitOps and Kubernetes documentation. Argo CD, Flux, Kustomize, Helm, policy controllers and secret tools are positioned where they represent common GitOps workflows. An example artifact is not an installation promise for a specific cluster.
- OpenGitOps: https://opengitops.dev/
- OpenGitOps Principles: https://github.com/open-gitops/documents/blob/main/PRINCIPLES.md
- Argo CD Documentation: https://argo-cd.readthedocs.io/en/stable/
- Argo CD Declarative Setup: https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/
- Argo CD Project Page: https://argoproj.github.io/cd/
- Flux Documentation: https://fluxcd.io/flux/
- Flux Core Concepts: https://fluxcd.io/flux/concepts/
- CNCF GitOps Certified Associate (CGOA): https://www.cncf.io/training/certification/cgoa/
- Linux Foundation Certified GitOps Associate (CGOA): https://training.linuxfoundation.org/certification/certified-gitops-associate-cgoa/
License
See LICENSE.md.