pages:

-title:"Build your app"

url:"/packaging-compilation"

-title:"Building Dockerimages"

-title:"Building DockerImages"

url:"/building-docker-images"

-title:"Working with Docker registries"

url:"/working-with-docker-registries"

url:"/microservices"

-title:"Production and Staging deployments"

url:"/environment-deployments"

-title:"Previewenvironments"

-title:"PreviewEnvironments"

url:"/preview-environments"

-title:"GitOpsdeployments"

-title:"GitOpsDeployments"

url:"/gitops-deployments"

-title:"Progressive Delivery"

url:"/progressive-delivery"

We strongly suggest that the Azure user who creates the integration is part of*Application Administrator* or*Global Administrator* roles.

To setup Azure Active Directory for SSO, you should first create a new application in Azure AD.

Login to*Azure Portal* and choose*Azure Active Directory* from the sidebar.

Once the application has been created, you will have to configure the permissions. Click on the name of the application to open the*Settings* section.

max-width="70%"

%}

Click*Delegated* permissions. From the list of permissions choose:

Click*Application* permissions. From the list of permissions choose:

Finally click the*Apply Permissions* button.

{% include image.html

lightbox="true"

file="/images/administration/sso/azure/8-Enabled-permissions.png"

url="/images/administration/sso/azure/8-Enabled-permissions.png"

alt="Microsoft GraphAPIpermissions"

caption="Microsoft GraphAPIpermissions"

file="/images/administration/sso/azure/ApplicationPermissions.png"

url="/images/administration/sso/azure/ApplicationPermissions.png"

alt="APIPermissions"

caption="APIPermissions"

max-width="70%"

%}

Afterwards please click on the*Grant admin consent* button from the bar above.

Next select*Certificates & secrets* from the left sidebar:

**client id* - shown as Application (client) ID in Azure (see below)

**client secret* - the key value as created in the previous section

**tenant* -`<Your Microsoft Azure AD Domain>.onmicrosoft.com`

**Object ID* - your Azure Object ID (see below)

**Object ID* - your AzureService PrincipalObject ID (from Enterprise Application configuration,see below)

Those fields can be seen in the overview page of your application registration:

{% include image.html

lightbox="true"

file="/images/administration/sso/azure/4-created-app.png"

url="/images/administration/sso/azure/4-created-app.png"

alt="Azure App Registration created"

caption="Azure App Registration created"

file="/images/administration/sso/azure/ObjectId.png"

url="/images/administration/sso/azure/ObjectId.png"

alt="Overview"

caption="Overview"

max-width="70%"

%}

title:"GitOpsdeployments"

title:"GitOpsDeployments"

description:"Learn how to deploy with Codefresh and ArgoCD"

group:ci-cd-guides

toc:true

This guide will explain how you can use GitOps for your own applications.

One of the central ideas around GitOps is the usage of Git for ALL project resources. Even though developers are familiar with using Git for the source code of the application, adopting GitOps means that you need to store in Git every other resource of the application (and not just the source code).

Creating a CI pipeline for GitOps is no different than a[standard pipeline]({{site.baseurl}}/docs/configure-ci-cd-pipeline/pipelines/) that[packages your Docker images]({{site.baseurl}}/docs/ci-cd-guides/building-docker-images/), runs[tests]({{site.baseurl}}/docs/testing/unit-tests/), performs[security scans]({{site.baseurl}}/docs/testing/security-scanning/) etc.

Codefresh is using this information to fill the deployment history in the GitOps dashboard.

To create a CD pipeline in Codefresh that is responsible for GitOps deployments you must first disable the auto-sync behavior of ArgoCD. You can disable auto-sync either from the GUI or via the[command line](https://argoproj.github.io/argo-cd/user-guide/auto_sync/):

Once the pipeline has finished running the sync status will updated in your GitOps dashboard to reflect the current state.

After you create an ArgoCD application, you can click on it in the[GitOps environment overview](https://g.codefresh.io/gitops) and see the respective GitOps screen.

max-width="100%"

%}

You can add filters on the deployment history by using the multi-select field on the top left of the screen.

For advanced filtering options, the search field on the top right allows you to view only the subset of deployments that match your custom criteria.

Using the search field allows you to quickly find a specific Git commit in the history of the application (and even rollback the deployment as explained in the next sections).

The current state tab shows a hierarchical view of your cluster resource for your application.

{% include image.html

lightbox="true"

file="/images/guides/gitops/currentstate.png"

url="/images/guides/gitops/currentstate.png"

alt="Current State tab"

caption="Current State tab"

max-width="80%"

%}

At the top of the screen you have several filters available:

* Kind - choose a specific type of Kubernetes resource

* Health - status of the resource

* Sync state - GitOps status of the resource

* Free search - search any resource by name

In the GitOps dashboard you will also see a complete history of all past deployments as recorded in Git. You can select any of the previous version and rollback your application to the respective version.

This rollback behavior is best used as an emergency measure after a failed deployment where you want to bring the cluster back to a previous state in a temporary manner. If you wish to keep the current rollback statue as a permanent status it is best to use the standard`git reset/revert` commands and change the GitOps repository to its desired state.

Usually the Pull Requests that take part in a GitOps workflow are created and approved in a manual way (after code review). You have the option however to fully automate the whole process and rather than opening a Pull Request on both the application repository and the manifest repository, commit automatically the manifest changes inside the pipeline that creates the artifact.