Reference architecture
GitOps delivery on Kubernetes
Application and environment repos are separated; ArgoCD reconciles clusters to Git continuously and reverts drift.
GitOps delivery on Kubernetes
01
App repo
- Code + Dockerfile
- PR review
02
CI
- Build & scan
- Push image
03
Env repo
- Helm values
- Per-env overlays
04
ArgoCD
- Auto-sync
- Self-heal
05
Clusters
- EKS · GKE · AKS
- Multi-AZ
Access plane
SSO to clusters · Namespace RBAC · Audit trail per change
Design decisions
DECISION 1
Separate app and environment repos so promotions are explicit, reviewable commits.
DECISION 2
self-heal on in production: the reviewed state is always the running state.
DECISION 3
Cluster upgrades follow a runbook: one minor version at a time, staging first.
Components
- App repo
- Code + Dockerfile · PR review
- CI
- Build & scan · Push image
- Env repo
- Helm values · Per-env overlays
- ArgoCD
- Auto-sync · Self-heal
- Clusters
- EKS · GKE · AKS · Multi-AZ