What threat models apply to Argo Rollouts?

Argo Rollouts is a powerful tool for managing blue-green and canary deployments in Kubernetes. However, like any software, it is essential to understand the potential threat models that may impact its operation and security. These threat models include:

• Unauthorized Access: Malicious users may try to gain access to Argo Rollouts and manipulate deployments.
• Configuration Errors: Improperly configured rollouts may lead to system outages or degraded performance.
• Denial of Service (DoS): Attackers may attempt to overwhelm Argo Rollouts with excessive requests, leading to service unavailability.
• Supply Chain Attacks: Vulnerabilities could be introduced through compromised images or dependencies used in Argo Rollouts.