“CISOs ought to due to this fact consider which workloads can talk with the Argo CD management airplane, whether or not east-west site visitors is appropriately segmented, and whether or not pointless belief relationships exist between software workloads and GitOps infrastructure,” Grover mentioned. “The evaluation ought to concentrate on assault paths relatively than perimeter publicity.”
Treating GitOps as tier-zero
The flaw additionally underscores the function GitOps platforms play in controlling software program deployment throughout enterprise infrastructure.
“GitOps engines aren’t utility companies; they’re tier-0 control-plane parts,” Datta mentioned. “By design, Argo CD holds learn entry to personal repositories, sync/write entry to focus on clusters, and custody of deployment secrets and techniques. It sits on the exact intersection of supply code, configuration administration, and reside infrastructure.”