localurl:/docs/deployments/helm/helm-releases-management/

-title:Promoting Helm environments

localurl:/docs/deployments/helm/helm-environment-promotion/

-title:CreatingGitOps applications

-title:CreatingArgo CD applications

localurl:/docs/deployments/gitops/create-application/

-title:MonitoringGitOps applications

-title:MonitoringArgo CD applications

localurl:/docs/deployments/gitops/applications-dashboard/

-title:ManagingGitOps applications

-title:ManagingArgo CD applications

localurl:/docs/deployments/gitops/manage-application/

-title:Argo CD Workflows

-title:CI/CD quick starts

url:"/ci-quick-start"

sub-pages:

-title:Pipeline quickstart

-title:Pipeline quickstarts

url:"/create-ci-pipeline"

-title:Kubernetes deployment quick start

url:"/deploy-to-kubernetes"

url:"/verify-requirements"

-title:Install a Hybrid GitOps Runtime

url:"/runtime"

-title:Createan application

-title:Create`codefresh-guestbook` Argo CD application

url:"/create-app-ui"

-title:Createand commit resources for application

-title:Create& commit resources for `codefresh-guestbook` application

url:"/create-app-specs"

-title:Updatetheimage tag for application

-title:Update image tag for `codefresh-guestbook` application

url:"/create-rollout"

-title:Dashboards & insights

-title:GitOps

url:"/gitops"

sub-pages:

-title:CreatingGitOps applications

-title:CreatingArgo CD applications

url:"/create-application"

-title:MonitoringGitOps applications

-title:MonitoringArgo CD applications

url:"/applications-dashboard"

-title:Application Groups for GitOps applications

url:"/gitops-app-groups"

-title:Managing GitOps applications

-title:Managing Argo CD applications

url:"/manage-application"

-title:Application Groups for Argo CD applications

url:"/gitops-app-groups"

-title:Progressive delivery with GitOps

url:"/install-argo-rollouts"

-title:TroubleshootingGitOps applications

-title:TroubleshootingArgo CD applications

url:"/troubleshooting-gitops-apps"

-title:Pipelines

lightbox="true"

file="/images/administration/access-control/gitops/gitops-add-rule.png"

url="/images/administration/access-control/gitops/gitops-add-rule.png"

alt="Add rule forGitOps applications"

caption="Add rule forGitOps applications"

alt="Add rule forArgo CD applications"

caption="Add rule forArgo CDapplications"

max-width="50%"

%}

{: .table .table-bordered .table-hover}

| Rule Element| Description|

| --------------| --------------|

|Teams| The team or teams to which to give access to the Application Entity. See[Adding users and teams]({{site.baseurl}}/docs/administration/account-user-management/add-users/).|

|Actions | The actions permitted for the application entity, and can be any or all of the following: {::nomarkdown} <ul><li><b>Refresh</b>: Allow users to manually regular refresh or hard refresh. The Refresh action is automatically disabled on selecting the Sync action which takes precedence. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#refreshhard-refresh-applications">Refresh/Hard Refresh applications</a>.</li><li><b>Sync</b>: Allow users to manually sync an application on-demand, and define the options for manual sync.<br>Selecting Sync automatically disables the Refresh action as Sync takes precedence over it. <br> See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#manually-synchronize-an-application">Manually synchronize an application</a>.</li><li><b>Terminate Sync</b>: Allow users to manually stop an ongoing sync for an application. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#terminate-on-going-application-sync">Terminate on-going application sync</a></li><li><b>Perform application rollback</b>: Allow users to rollback the current release of an application to a previous deployment version or release in Codefresh. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#rollback-gitops-applications">Rollback GitOps applications</a>.</li><li><b>View pod logs</b>: Allow users to view logs for pod resources of an application in the Current State tab. <br>See <a href="https://codefresh.io/docs/docs/deployments/gitops/applications-dashboard/#logs-for-application-resources">Logs for application resources</a>.</li><b>Pause rollout</b> and <b>Resume rollout</b>: Allow users to pause an ongoing rollout and resume a paused rollout either directly from the Timeline tab of the application, or through the controls in the Rollout Player. <br>See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#pauseresume-ongoing-rollouts">Pause/resume ongoing rollouts</a> and <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#manage-an-ongoing-rollout-with-the-rollout-player">Managing an ongoing rollout with the Rollout Player</a>.</li><li><b>Promote full rollout</b>: Allow users to use the Promote Full button in the Rollout Player to skip the remaining steps in the rollout and promote to deployment. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#manage-an-ongoing-rollout-with-the-rollout-player">Managing an ongoing rollout with the Rollout Player</a>.</li><li><b>Skip current step in rollout</b>: Allow users to use the Skip Step button in the Rollout Player to skip executing the current step in the rollout. <br>See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#manage-an-ongoing-rollout-with-the-rollout-player">Managing an ongoing rollout with the Rollout Player</a>.</li><b>Delete resource</b>: Allow users to delete an application resource from the Current State tab. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#delete-an-application">Delete an application</a>.</li></ul>{:/} |

|Actions | The actions permitted for the application entity, and can be any or all of the following: {::nomarkdown} <ul><li><b>Refresh</b>: Allow users to manually regular refresh or hard refresh. The Refresh action is automatically disabled on selecting the Sync action which takes precedence. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#refreshhard-refresh-applications">Refresh/Hard Refresh applications</a>.</li><li><b>Sync</b>: Allow users to manually sync an application on-demand, and define the options for manual sync.<br>Selecting Sync automatically disables the Refresh action as Sync takes precedence over it. <br> See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#manually-synchronize-an-application">Manually synchronize an application</a>.</li><li><b>Terminate Sync</b>: Allow users to manually stop an ongoing sync for an application. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#terminate-on-going-application-sync">Terminate on-going application sync</a></li><li><b>Perform application rollback</b>: Allow users to rollback the current release of an application to a previous deployment version or release in Codefresh. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#rollback-argo-cd-applications">Rollback Argo CD applications</a>.</li><li><b>View pod logs</b>: Allow users to view logs for pod resources of an application in the Current State tab. <br>See <a href="https://codefresh.io/docs/docs/deployments/gitops/applications-dashboard/#logs-for-application-resources">Logs for application resources</a>.</li><b>Pause rollout</b> and <b>Resume rollout</b>: Allow users to pause an ongoing rollout and resume a paused rollout either directly from the Timeline tab of the application, or through the controls in the Rollout Player. <br>See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#pauseresume-ongoing-rollouts">Pause/resume ongoing rollouts</a> and <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#manage-an-ongoing-rollout-with-the-rollout-player">Managing an ongoing rollout with the Rollout Player</a>.</li><li><b>Promote full rollout</b>: Allow users to use the Promote Full button in the Rollout Player to skip the remaining steps in the rollout and promote to deployment. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#manage-an-ongoing-rollout-with-the-rollout-player">Managing an ongoing rollout with the Rollout Player</a>.</li><li><b>Skip current step in rollout</b>: Allow users to use the Skip Step button in the Rollout Player to skip executing the current step in the rollout. <br>See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#manage-an-ongoing-rollout-with-the-rollout-player">Managing an ongoing rollout with the Rollout Player</a>.</li><b>Delete resource</b>: Allow users to delete an application resource from the Current State tab. See <a href="https://codefresh.io/docs/docs/deployments/gitops/manage-application/#delete-an-application">Delete an application</a>.</li></ul>{:/} |

|Attributes |Adding attributes, either individually or in combination, allow more fine-grained access control to enforce the _where_ policies for teams and actions. <br>Single attributes are useful to grant or deny access based on a specific property. For example, allow access to application entities on a cluster or within a namespace. <br>Combinations of attributes help enforce more complex access control. For example, require both a Runtime and a Label attribute to grant access to an application entity.<br>You can also add multiple instances of the same attribute with different values. For example, multiple Label attibutes with different values to sync application entities.{::nomarkdown} <ul><li><b>Cluster</b>: Allow access to all application entities in the cluster, regardless of the namespace, Runtime, and Git Sources of specific applications.</li><li><b>Namespace</b>: Allow access to application entities only within the namespace. If users have multiple accounts on different clusters with the same namespace, they can access applications in all those namespaces.</li><li><b>Runtime</b>: Allow access to application entities associated with the defined Runtime.</li><li><b>Git Source</b>: Allow access to application entities only in the defined Git Source. A Git Source is always associated with a Runtime.</li><li><b>Label</b>: Allow access only to application entities that share the same label.</li></ul>{:/} |

title:"Deploy with GitOps"

description:"Learn how Codefresh deploysGitOps applications"

description:"Learn how Codefresh deploysArgo CD applications"

group:deployments

toc:true

Codefresh has a native module for GitOps deployments powered by Argo CD and Argo Rollouts. It also has native support for Argo Events and Argo Workflows.

* Createa[GitOps Application]({{site.baseurl}}/docs/deployments/gitops/create-application/) either from the GUI or the CLI.

*[Monitor yourGitOps applications]({{site.baseurl}}/docs/deployments/gitops/applications-dashboard/) and check their health status

* Createan[Argo CD Application]({{site.baseurl}}/docs/deployments/gitops/create-application/) either from the GUI or the CLI.

*[Monitor yourArgo CD applications]({{site.baseurl}}/docs/deployments/gitops/applications-dashboard/) and check their health status

* You can[edit/delete/rollback]({{site.baseurl}}/docs/deployments/gitops/manage-application/) applications while still keeping the state in Git.

* Perform[Canary releases]({{site.baseurl}}/docs/deployments/gitops/install-argo-rollouts/) via the dedicated UI

* Perform[Canary releases]({{site.baseurl}}/docs/deployments/gitops/install-argo-rollouts/) via the dedicated UI.