| Deployment model | Pull-based in-cluster controllers that periodically or reactively sync manifests. See ArgoCD. | Pull-based in-cluster controllers following Kubernetes controller patterns. See FluxCD. | CI-driven (push) pipelines that apply changes as part of pipeline runs. See Jenkins X. |
| Reconciliation mechanism | Continuous in-cluster reconciliation by controller, supports manual/automated sync. | Continuous in-cluster reconciliation, modular controllers (including Helm controller). | Reconciliation via pipeline executions (e.g., Tekton); not always a continuously running GitOps controller. |
| GitOps philosophy | Purpose-built GitOps CD; Git is the source of truth with declarative manifests. | Kubernetes-native GitOps operator emphasizing controller patterns. | Embeds GitOps into a broader CI/CD platform with pipelines and preview environments. |
| Sync triggers | Periodic polling or webhook-driven updates; supports manual sync. | Periodic polling or webhook-driven; Git events can trigger controllers. | Triggered by PRs/merges and CI pipeline executions (push model). |
| Core focus | Continuous delivery, UI-driven workflows, multi-cluster support. | Lightweight operator, Kubernetes-native, extensible controller model. | End-to-end CI/CD automation (builds, previews, developer pipelines) plus CD. |
| Helm / Kustomize support | Supports Helm charts and Kustomize. | Strong support; has a dedicated Helm controller for Helm workflows. | Supports Helm (commonly Helm 3) and can integrate Kustomize into pipelines. |
| Secret management | Integrates with Sealed Secrets, SOPS, Vault, etc. | Integrates with SOPS, Sealed Secrets, Vault, and other secret tools. | Built-in Vault integration and other secret management workflows. |
| CI integration | CI-agnostic — any CI that updates Git works with ArgoCD. | CI-agnostic — designed to work with any CI that commits to Git. | Includes CI pipeline tooling (e.g., Tekton) as part of the platform. |
| Operational model | In-cluster pull-based controllers by default. | In-cluster pull-based controllers by default. | CI-driven push workflows; reconciliation typically occurs during pipeline runs. |