How nutcas3/openshift works
This repository is a declarative OpenShift platform portfolio, not one application. Its main workflow is developer self-service scaffolding, followed by GitOps-managed environment promotion and policy-controlled deployment. The graph also captures documented security, operations, and specialized platform capabilities. Evidence is primarily the top-level README and file tree; sampled application source only confirms the behavior of service templates, so uncertain implementation-level wiring is omitted.
Main entry points: applicationsets ArgoCD Applications · fleet-workloads Fleet Workloads · rhdh Developer Portal · templates Service Templates
Components 24
Developer Experience
- Developer Portal
dev-ex/rhdh - Service Templates
dev-ex/templates
Delivery and Security
- Tenant GitOps
multi-cluster-gitops/tenants - ArgoCD Applications
multi-cluster-gitops/argocd/applicationsets - Fleet Workloads
multi-cluster-gitops/fleet-workloads - Secure CI Pipeline
trusted-supply-chain/ci/pipeline.yaml - Scans and Signing
trusted-supply-chain/ci - Admission Policies
trusted-supply-chain/policy/clusterpolicy-require-signature.yaml
Tenancy and Governance
- Cluster Policies
policy-engine/cluster-policies - Tenant Isolation
multi-tenancy/base - Vault Secret Store
secret-management/vault/cluster-secret-store.yaml - External Secrets
secret-management/vault/external-secret.yaml - Sealed Secrets
multi-cluster-gitops/fleet-workloads/secrets
Operations and Resilience
- Monitoring and Costs
observability-finops/monitoring - Grafana
observability-finops/grafana/instance.yaml - Chaos SLO Gate
chaos-engineering/chaos/chaos-slo-gate.yaml - Service Mesh
service-mesh/mesh - Disaster Recovery
disaster-recovery/acm - Edge Fleet
edge-fleet/edge/edge-node-fleet.yaml
Platform Workloads
- AI and LLM Serving
ai-ml-platform/ai - Virtual Machines
vm-modernization/vms - Serverless Workloads
serverless/knative
Other components
- Engineer
- OpenShift Clusters
Connections 20
- Engineer → Developer Portal: uses
- Developer Portal → Service Templates: offers
- Service Templates → Tenant GitOps: scaffolds PRs
- ArgoCD Applications → Fleet Workloads: syncs overlays
- ArgoCD Applications → Tenant Isolation: onboards namespaces
- Fleet Workloads → OpenShift Clusters: deploys workloads
- Secure CI Pipeline → Scans and Signing: builds and verifies
- Cluster Policies → Admission Policies: enforces signatures
- Admission Policies → OpenShift Clusters: guards admission
- External Secrets → Vault Secret Store: reads secrets
- Sealed Secrets → Fleet Workloads: supplies credentials
- Monitoring and Costs → Tenant Isolation: scrapes metrics
- Grafana → Monitoring and Costs: visualizes
- Chaos SLO Gate → ArgoCD Applications: gates promotion
- Service Mesh → OpenShift Clusters: adds mTLS and canary
- Disaster Recovery → OpenShift Clusters: manages failover
- Edge Fleet → OpenShift Clusters: extends fleet
- AI and LLM Serving → OpenShift Clusters: hosts AI workloads
- Virtual Machines → OpenShift Clusters: hosts VMs
- Serverless Workloads → OpenShift Clusters: runs event workloads