This repository implements Operate First SIG/SRE Infrastructure Services
and partialy Hybride Cloud Patterns: Multicluster DevSecOps
It is also available via radicle as rad:z2y94Zx8RUfQBNQD2nSpPLN5CW7NQ.
On the nostromo environment we have deployed and configured the following infrastructure services:
- Operate First GitOps
- Operate First Pipelines
- Kubernetes Prow
- Open Policy Agent Gatekeeper
These services are deployed on the nostromo environment.
- #B4mad Racing
- Operate First's Peribolos as a Service
We follow an app-of-apps pattern, where we have a single kustomization.yaml file that references all other manifests,
it can be found in the manifests/applications/app-of-apps.yaml file.
All kustomize manifests are located below the manifests/ directory.
Manifests that are generally useful or applicable are located in the component/ directory. These are not intended
to be deployed directly, but rather used as a reusable component for other (environment specific) manifests.
These manifests are valid and applicaple to the whole #B4mad organizational unit of Operate First, they should be deployed to each of our clusters.
These manifests are valid and applicable to a single cluster, they should be deployed to a cluster. They are agnostic to any organizational unit and implement a specific functionality/configuration that is generally applicable.
These manifests are valid and applicable to a single environment, they should be deployed to a cluster and may reference ou or cluster scoped manifests. They implement a specific functionality/configuration that is specific to a single environment.
A few of the configurations recommended for Single-Node OpenShift have been implemented as well.
To configure a specific environment, run kustomize build manifests/environments/nostromo | oc apply -f -
If you like this project, or depend on it, feel free to support it via the drips.network and check out https://www.drips.network/app/projects/github/b4mad/op1st-emea-b4mad