--- title: A weekend of GitOps: GitHub Actions, FluxCD, and Istio... description: A hands-on walkthrough of building a full GitOps CI/CD pipeline where a git push is the only manual step. The setup uses GitHub Actions for testing,... canonical: https://daily.dev/posts/a-weekend-of-gitops-github-actions-fluxcd-and-istio-on-eks-p3dhqenln twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: A weekend of GitOps: GitHub Actions, FluxCD, and Istio on EKS | daily.dev og:description: A hands-on walkthrough of building a full GitOps CI/CD pipeline where a git push is the only manual step. The setup uses GitHub Actions for testing,... og:url: https://daily.dev/posts/a-weekend-of-gitops-github-actions-fluxcd-and-istio-on-eks-p3dhqenln og:image: https://api.daily.dev/og/posts/p3dhQeNlN.png og:image:alt: A weekend of GitOps: GitHub Actions, FluxCD, and Istio on EKS og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # A weekend of GitOps: GitHub Actions, FluxCD, and Istio on EKS **[Medium](https://daily.dev/sources/medium_js)** · 8 min read · 6 upvotes · 0 comments ## Summary A hands-on walkthrough of building a full GitOps CI/CD pipeline where a git push is the only manual step. The setup uses GitHub Actions for testing, vulnerability scanning with Trivy, and pushing signed images to ECR via OIDC federation. FluxCD running on EKS detects new images, commits version bumps back to the repo, and deploys through an Istio service mesh using the Kubernetes Gateway API. Key architectural decisions covered include: Terraform bootstrapping for remote state, IRSA for credential-free ECR access, SOPS+age encryption for secrets in a public repo, cosign keyless image signing, and Flux image automation with a timestamp-based tag policy. The post also documents real debugging pain points like EKS security group rules blocking Istio's webhook and HelmRelease remediation configuration. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Building a Production Style Kubernetes Platform on AWS with Amazon EKS](https://daily.dev/posts/building-a-production-style-kubernetes-platform-on-aws-with-amazon-eks-dh3yqcvc2) · Medium · 3 upvotes · 0 comments - [How to Implement GitOps on Kubernetes Using Argo CD](https://daily.dev/posts/how-to-implement-gitops-on-kubernetes-using-argo-cd-m6tftogdu) · freeCodeCamp · 6 upvotes · 0 comments --- Tags: [#kubernetes](https://daily.dev/tags/kubernetes), [#github-actions](https://daily.dev/tags/github-actions), [#gitops](https://daily.dev/tags/gitops), [#istio](https://daily.dev/tags/istio) [View this post on daily.dev](https://daily.dev/posts/a-weekend-of-gitops-github-actions-fluxcd-and-istio-on-eks-p3dhqenln) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"A weekend of GitOps: GitHub Actions, FluxCD, and Istio on EKS","url":"https://daily.dev/posts/a-weekend-of-gitops-github-actions-fluxcd-and-istio-on-eks-p3dhqenln","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/a-weekend-of-gitops-github-actions-fluxcd-and-istio-on-eks-p3dhqenln"},"datePublished":"2026-07-16T19:32:35.472Z","dateModified":"2026-07-17T02:21:17.168Z","description":"A hands-on walkthrough of building a full GitOps CI/CD pipeline where a git push is the only manual step. The setup uses GitHub Actions for testing,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3e3654c4a8d98543d0bc11f6e363130a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3e3654c4a8d98543d0bc11f6e363130a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Medium","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Medium","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/medium","url":"https://daily.dev/sources/medium_js"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/a-weekend-of-gitops-github-actions-fluxcd-and-istio-on-eks-p3dhqenln","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":6},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"kubernetes,github-actions,gitops,istio","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Medium","item":"https://daily.dev/sources/medium_js"},{"@type":"ListItem","position":3,"name":"A weekend of GitOps: GitHub Actions, FluxCD, and Istio on EKS"}]} ```