ArgoCD

Overview

QCecuring integrates with ArgoCD to ensure that applications deployed through GitOps workflows have properly provisioned and managed TLS certificates. Certificate resources defined in Git repositories are fulfilled by QCecuring’s CA integrations, maintaining the GitOps paradigm for security infrastructure.

Key capabilities

• Automatic certificate provisioning when ArgoCD syncs applications containing Certificate resources.
• Health checks for certificate resources ensuring ArgoCD reports accurate sync and health status.
• Policy enforcement on certificate specifications defined in Git repositories before deployment.
• Visibility into certificate status across all ArgoCD-managed applications and clusters.
• Integration with cert-manager issuers backed by QCecuring for seamless GitOps certificate workflows.

Typical use cases

• Platform teams using ArgoCD for Kubernetes deployments needing automated certificate management.
• Organizations practicing GitOps where certificate configurations are version-controlled alongside applications.
• Security teams requiring governance over certificates deployed through ArgoCD sync operations.

High-level integration flow

1. Configure QCecuring-backed cert-manager issuers in clusters managed by ArgoCD.
2. Teams define Certificate resources in application Git repositories alongside deployment manifests.
3. ArgoCD syncs applications, triggering cert-manager to request certificates from QCecuring.
4. QCecuring issues certificates according to organizational policies and tracks them in inventory.
5. ArgoCD health checks confirm certificate readiness, and QCecuring monitors ongoing lifecycle compliance.

CBOM Discovery

QCecuring discovers TLS certificates and signing keys used by ArgoCD for repository authentication and application sync, adding them to your CBOM inventory.