diverge-infra

diverge-infra is the control repository r3x. The GitOps control repository for diverge can be found at https://gitlab.example.com/path/to/gitops-diverge.

Getting started

Run

./scripts/deploy.sh -e dev -w <workspace> -a

In need of work

A list of things to explore...

• [ ] Source GitOps credentials in AWS SecretsManager

• [ ] 1P: Secrets

• [x] Argo CD: Auto config clusters

• [x] Argo CD: Auto config repositories

• [x] Argo CD: GitOps flow using Argo CD

• [ ] Discord: Notifications

• [x] K8S: ALB Controller

• [x] K8S: Cluster Autoscaler

• [x] K8S: ExternalDNS (a4l.io) should own R53 HZ (for cluster)

• [ ] K8S: Prometheus Stack

• [x] K8S: Istio Ingress

• [ ] Teams: Notifications

• [ ] Argo: Look into Workflows

• [x] Pre-commit

• [ ] Changelog

• [ ] Renovate

Infracost

infracost breakdown --path environments --format json --out-file infracost-base.json

LocalStack (In Progress)

export LOCALSTACK_AUTH_TOKEN="REDACTED"

docker run \
  --rm -it \
  -p 127.0.0.1:4566:4566 \
  -p 127.0.0.1:4510-4559:4510-4559 \
  -p 127.0.0.1:443:443 \
  -e LOCALSTACK_AUTH_TOKEN=${LOCALSTACK_AUTH_TOKEN:?} \
  -v /var/run/docker.sock:/var/run/docker.sock \
  localstack/localstack-pro

aws route53 create-hosted-zone --name sbx.a4l.io --caller-reference $(date +%s) --endpoint-url http://localhost:4566

graph TD
    A[Internet] --> B[DNS - a4l.io]

    subgraph "AWS Organizations"
        B --> C[Network Account]

        subgraph "Route53 Zones"
            C --> D[Root Zone: a4l.io]
            D --> E[Environment Zone: test.a4l.io]
            E --> F[Project Zone: test.project.a4l.io]
        end

        subgraph "Project Account"
            F --> G[Load Balancer]

            subgraph "VPC"
                G --> H[EKS Cluster]

                subgraph "Kubernetes Resources"
                    H --> I[Services]
                    H --> J[Ingress]
                end

                subgraph "Network Components"
                    K[VPC CIDR]
                    L[Public Subnets]
                    M[Private Subnets]
                    N[NAT Gateway]

                    K --> L
                    K --> M
                    L --> N
                    N --> M
                end
            end
        end
    end

    style C fill:#f9f,stroke:#333,stroke-width:2px
    style D fill:#ff9,stroke:#333,stroke-width:2px
    style E fill:#9f9,stroke:#333,stroke-width:2px
    style F fill:#9ff,stroke:#333,stroke-width:2px