Full GitOps Cluster
A complete cluster defined and operated entirely from Git.
0 of 6 steps
What you will end up with
An app of apps structure
Cluster bootstrap from git
A fully auditable platform
Build steps
0/6Provision the cluster itself, nodes and networking included, from config files instead of manual console clicks. Even the building the app lives in gets built from a blueprint, never improvised on site.
Commit Argo CD’s own install manifest into a bootstrap repo and apply it once by hand, the one manual step that starts everything else. It is the single key you turn by hand to start an engine that then drives itself.
Create one root Application that itself points at a folder of other Application manifests, one per service. The app-of-apps is a table of contents, one entry per chapter, each chapter managing itself.
Put things like ingress controllers and cert-manager into the same git-managed structure as your apps, instead of installing them by hand. Add-ons walk through the same front door as everything else, no side entrances.
Use an encrypted-secrets approach so secrets can live safely in the same git repo as everything else. This lets you photograph the vault’s outside publicly, without ever exposing what is actually inside it.
Write down, step by step, how you would rebuild this cluster from zero using only the git repos, and actually test it once. If you cannot rebuild it from the instructions, the instructions are not finished yet.
Before you start