Reference
Comparison
Wardn vs ArgoCD vs Flux โ honest comparison
Comparison
How Wardn compares to the established GitOps tools. We built Wardn because we believe you shouldn't need a dedicated platform team to run ArgoCD.
Feature Matrix
| Feature | Wardn | ArgoCD | Flux |
|---|---|---|---|
| Git sync | โ | โ | โ |
| Raw YAML | โ | โ | โ |
| Kustomize | โ | โ | โ |
| Helm | ๏ฟฝ | โ | โ |
| Image-source deploys | โ (distinctive) | โ | โ |
| Server-side apply | โ | โ | โ |
| Pruning | โ | โ | โ |
| Self-heal | ๐ (field only) | โ | โ |
| Health checks | ๐ง (5 kinds) | โ | โ (limited) |
| Multi-cluster | โ | โ | โ |
| Approval gates | โ
(requiresApproval) | โ | โ |
| Freeze | โ
(spec.freeze) | โ (suspend) | โ (suspend) |
| Sync waves | ๐ | โ | โ (dependsOn) |
| Hooks | ๐ | โ | ๐ง |
| Rollback | โ | โ | โ |
| Diff view | โ | โ | โ |
| Web UI | โ | โ | โ (3rd party) |
| Built-in auth | โ (Better Auth + orgs) | โ (needs Dex) | โ |
| RBAC | โ (org + scoped bindings) | โ (complex) | โ |
| Audit log | โ | โ | โ |
| SOPS | ๐ง (store; no decrypt) | โ | โ |
| ESO integration | โ | ๐ง | โ |
| Vault direct | ๏ฟฝ (image env only) | โ | โ |
| Notifications | ๐ง (Slack only) | โ | โ |
| Webhooks | ๐ง (GitHub, unsigned) | โ | โ |
| CLI | ๐ง (clusters/can-i/mcp) | โ | โ |
| API | โ | โ (gRPC/REST) | โ |
| MCP/agent access | โ | โ | โ |
โ Available ยท ๐ง Partial ยท ๐ Planned ยท โ Not available
Component Count
| Tool | Components |
|---|---|
| Wardn | 3 โ server, operator, frontend (+ Postgres, Redis) |
| ArgoCD | 5+ โ server, repo-server, application-controller, dex, redis, notifications-controller |
| Flux | 3+ โ source-controller + kustomize-controller + helm-controller operators |
Fewer components means simpler installation, less to monitor, smaller attack surface, and easier troubleshooting.
Philosophy Differences
vs ArgoCD
- Auth โ ArgoCD needs Dex/OIDC for SSO; Wardn embeds Better Auth (email + social + org/team memberships).
- RBAC โ ArgoCD uses Casbin policies in a ConfigMap; Wardn's is org-role + scoped-binding, UI-managed.
- Sources โ Wardn adds an
Imagesource type (registry-driven deploys โ no git repo needed) on top of git paths. - Agents โ Wardn exposes an MCP endpoint; ArgoCD has no agent surface.
- Gaps โ ArgoCD is ahead on self-heal, diff view, sync waves/hooks, Helm, and app-of-apps.
Choose ArgoCD if you need its mature ecosystem, ApplicationSets, or proven self-heal/diff today.
vs Flux
- UI โ Flux has none; Wardn ships the platform app.
- Auth โ Flux has none; Wardn has orgs, teams, scoped roles.
- Rollback โ Flux reverts in git; Wardn has
POST /rollback. - Gaps โ Flux is ahead on source maturity (OCI/Helm repos) and SOPS decrypt-at-apply.
Choose Flux if you want minimal composable operators and build the platform layer yourself.
Choose Wardn if...
- You want GitOps without the platform-team overhead
- You need a UI with built-in auth, orgs, and scoped RBAC out of the box
- Image-source deploys fit your workflow (no git repo required per app)
- You want an MCP/agent-access surface โ proposals gated by human approval
- You value operational simplicity over feature maximalism, and accept the gaps above
Migration
ArgoCD โ Wardn migration tooling is on the roadmap. The App spec maps mechanically from ArgoCD's Application:
ArgoCD Application | Wardn App |
|---|---|
spec.source.repoURL | spec.source.git.repoURL |
spec.source.targetRevision | spec.source.git.branch |
spec.source.path | spec.source.git.path |
spec.syncPolicy.automated | spec.syncPolicy.automated |
spec.syncPolicy.automated.prune | spec.syncPolicy.prune |
spec.syncPolicy.automated.selfHeal | spec.syncPolicy.selfHeal ๐ unwired |
spec.destination.server | spec.destination.cluster (registered name) |
spec.destination.namespace | spec.destination.namespace |
spec.sources[].helm.valueFiles | spec.source.git.helm.valuesFile ๐ unwired |
Related
- Roadmap โ what's coming next
- Architecture โ how Wardn is built