# Kubernetes
All Kubernetes notes →1 — Helm
Helm's Go-template-over-YAML approach turns configuration into string manipulation instead of structured data, trading type safety for reusability across charts.
2 — Kustomize
Kustomize edits valid YAML with strategic-merge patches instead of templating it, so every intermediate step stays parseable and diffable.
3 — Argo CD
Argo CD's pull-based reconciliation means the cluster fetches its own desired state from Git, so a compromised CI pipeline never gets a credential that can write to the cluster.
4 — Flux
Flux splits GitOps into composable controllers — source, kustomize, and notification — so drift detection and reconciliation are independent concerns instead of one monolithic sync job.
5 — Operator Framework
The Operator Framework's real value isn't wrapping CRUD around a CRD — it's encoding an SRE's operational runbook into a reconcile loop so failure recovery happens without a human paging in.