argo-cd

You can use Bunnyshell Ephemeral environments for this (bunnyshell.com). - The Postgres instances will be deployed in Kubernetes (bring your own infra if you want), - you can configure seeding, - and also you can run any other containers next to Postgres (for example E2E tests). - You can trigger the process manually or automatically (PR, GH actions, cli tool, API, etc). For example, the ArgoCD project uses Bunnyshell to create ephemeral envs on each PR. https://github.com/argoproj/argo-cd/pull/18851 Disclaimer: I work for Bunnyshell

I personally consider the ArgoCD UI an anti-feature. Attaching some hulking mass of Javascript dependencies to the thing that has cluster-admin rights to my production cluster is unnecessary attack surface for me. ArgoCD also has its own auth system and permissions. You give ArgoCD cluster-admin rights, then it uses impersonation to pretend like it has lower permissions. One little bug there and you can trick ArgoCD into escalating your permissions, which happens a lot: https://github.com/argoproj/argo-cd/security/advisories/GHSA... While not officially supported, you can technically deploy Flux with limited permissions, but ArgoCD's dependence on impersonation means it cannot run with lower permissions.

This is cool - I can think of some projects that are amazing as first contributors, and others I can think of that are terrible. One thing I think the tool doesn't address is why someone should contribute to a particular project. Having stars is interesting, and a proxy for at least historical activity, but also kind of useless here - take argoproj/argo-cd [1] as an example - 14.5k stars, with a backlog of 2.7k issues and an issue tracker that's a real mess. Either way, I think this tool is neat for trying to gain some experience in a project purely based on language. [1] https://github.com/argoproj/argo-cd/issues?q=is%3Aissue+is%3...

I pay $7 a month for a server and I self-host a bunch of services for personal use: - n8n (n8n.io) - Zapier alternative - Privatebin (github.com/PrivateBin/PrivateBin) - encrypted pastebin for sharing sensitive data - Headscale (github.com/juanfont/headscale) - open-source implementation of the Tailscale control server. Lets me set up a personal VPN easily. - Argo CD (github.com/argoproj/argo-cd) - I use the VPS as single-node Kubernetes, and argo lets me manage my deployments. - Hashicorp Vault (vaultproject.io) - For managing secrets. I also wanted to self-host something like Gitpod or Github Codespaces, but there was nothing available. So I decided to build it. It's at https://hocus.dev if you want to check it out. What do you self host? I'm curious to see what else I could put up.