Skip to content

Learn DevSecOps

Argo CD

Argo CD keeps a cluster matched to Git: an Application names a source and a destination, then sync and health tell you whether they still agree. This course covers self-heal and prune, sync waves, app-of-apps and ApplicationSets, Helm and Kustomize sources, then projects, SSO, and why the control plane itself is a target. Self-heal will revert a kubectl hotfix; that is the point, and a compromised Argo instance can deploy anywhere it is allowed to sync.

Advanced3 sections · 12 lessons · ~6h total · 14-question self-test

01

Argo CD fundamentals

4 lessons

01GitOps & what Argo CD isGit as the source of truth.12 min 02The Application resourceSource, destination, and sync.12 min 03Sync, health & statusSynced, healthy, and diffs.12 min 04The reconcile loop & driftHow Argo detects and corrects.12 min

02

Sync, waves & app-of-apps

4 lessons

01Sync policies & self-healAuto-sync, prune, self-heal.14 min 02Sync waves & hooksOrder and lifecycle jobs.12 min 03App-of-apps & ApplicationSetsManage many apps/clusters.14 min 04Helm & Kustomize sourcesRender tools inside Argo.12 min

03

Projects, secrets & hardening

4 lessons

01Projects, multi-cluster & RBACBoundaries and permissions.14 min 02Secrets & image updatesSecrets in GitOps; auto image bumps.12 min 03Hardening Argo CDIt can deploy anything, anywhere.14 min 04Inside Argo CD and FluxTwo GitOps machines, one loop: bootstrap, drift, blast radius, tenancy, signing.10 min

Progress is saved in this browser only — no account required.

Quick reference

Argo CD cheat sheetCheat sheet Argo CD vs FluxComparison GitOps interview questionsInterview guide

Final exam

Test yourself on everything

14 questions drawn from all 3 sections — every answer explained as you pick.

Start final exam