Skip to content

A clear boundary between platform bootstrap and GitOps delivery

An Argo CD bootstrap example and the additional application, access and recovery decisions required for a usable GitOps delivery workflow.

By Talha Rehman · Public source reviewed November 2026

The problem and the implementation

Public repository evidenceArchitecture and trade-offs

The problem

A platform can have Argo CD installed while releases still depend on manual steps. Installing a controller and establishing a delivery process are separate pieces of work.

What the source shows

The EKS add-ons root installs the Argo CD Helm chart with internal ingress configuration. The public repository demonstrates this bootstrap layer; application definitions and promotion workflows are additional scope.

System flow

  1. 01

    Terraform foundation

  2. 02

    Helm installation

  3. 03

    Argo CD controller

  4. 04

    Application configuration

  5. 05

    Reconciliation + recovery

Key decisions and trade-offs

  1. 01

    Assign resource ownership

    Agree which resources Terraform manages and which Argo CD reconciles. Avoid competing ownership of the same application configuration.

  2. 02

    Complete access and transport controls

    Review TLS termination, authentication, deployment permissions and repository credentials. Internal networking alone is not the complete access-control design.

  3. 03

    Test a release and its recovery path

    Onboard one staging application, observe reconciliation and test a failed rollout. Document whether recovery uses a Git revert, an earlier artifact or application-specific steps.

Demonstrated result and its limits

The checked-in chart configuration is an inspectable starting point. Deployment frequency, bootstrap duration and recovery time need measurement in the system where the workflow runs.

What to validate in your environment

A handover should demonstrate application onboarding, a reviewed deployment, a failed rollout and a recovery procedure the receiving team can follow.

Inspect the evidence

These links identify the source revision used for this write-up.

Read Talha’s technical walkthrough ↗

START WITH YOUR SYSTEM

Discuss the change
your team needs.

Talk through your project