How chrisignat/multi-service-platform-provisioner works
This repository provisions a Kubernetes-based internal developer platform and defines a self-service PostgreSQL provisioning workflow. The main user journey is submitting that workflow in Argo Workflows, which performs the documented security scan, creates credentials, deploys a database, and produces an access card. A separate GitOps branch uses the bootstrap Root App and ArgoCD to manage platform infrastructure. The README also documents observability, secrets, backup, cost, and local AWS-compatible services. Wiring for unsampled manifests and workflow steps is shown only where documented.
Main entry points: infrastructure Infrastructure Apps · postgres-deploy-pipeline.yaml Postgres Pipeline · argo-workflows Workflows UI · argocd-app.yaml ArgoCD
Components 21
Self-Service Provisioning
- Workflows UI
infrastructure/argo-workflows - Postgres Pipeline
golden-path/jobs/postgres-deploy-pipeline.yaml - Trivy Scan
golden-path/jobs/postgres-deploy-pipeline.yaml - Credential Generation
golden-path/jobs/postgres-deploy-pipeline.yaml - Postgres Deployment
golden-path/jobs/postgres-deploy-pipeline.yaml - Access Card
golden-path/jobs/postgres-deploy-pipeline.yaml - Port Catalog
GitOps Delivery
- Root App
bootstrap/root-app.yaml - ArgoCD
infrastructure/argocd/argocd-app.yaml - Infrastructure Apps
infrastructure
Platform Services
- Argo Workflows
infrastructure/argo-workflows/argo-workflows-app-argocd.yaml - Cilium & Hubble
infrastructure/cilium - Monitoring
infrastructure/monitoring - Kubecost
infrastructure/kubecost
Operations & Storage
- Secrets Services
infrastructure/sealed-secrets - Vault
infrastructure/vault - External Secrets
infrastructure/eso - Velero Backup
infrastructure/velero - LocalStack
infrastructure/localstack - Terraform S3
terraform/main.tf
Other components
- Developer
Connections 19
- Developer → Workflows UI: submits workflow
- Workflows UI → Postgres Pipeline: runs workflow
- Postgres Pipeline → Trivy Scan: scans first
- Postgres Pipeline → Credential Generation: generates credentials
- Postgres Pipeline → Postgres Deployment: deploys database
- Postgres Pipeline → Access Card: generates card
- Postgres Pipeline → Port Catalog: updates entities
- Root App → ArgoCD: defines root app
- ArgoCD → Infrastructure Apps: manages apps
- Infrastructure Apps → Argo Workflows: deploys
- Infrastructure Apps → Cilium & Hubble: deploys
- Infrastructure Apps → Monitoring: deploys
- Infrastructure Apps → Kubecost: deploys
- Infrastructure Apps → Secrets Services: deploys
- Infrastructure Apps → Vault: deploys
- Infrastructure Apps → External Secrets: deploys
- Infrastructure Apps → Velero Backup: deploys
- Infrastructure Apps → LocalStack: deploys
- Terraform S3 → LocalStack: provisions bucket