Infrastructure

Concrete Infrastructure Layout

In this document we show the Infrastructure in place for the project.

Environments:

• production

• staging

• dev

Micro Services

• One per namespace

• Deploys with commit_sha

• K8s manifests for the service lives in its own repo

Secrets

• Will use GCP Secrets Manager and gcloud sdk to access the secrets at runtime

Infrastructure as Code

When the time comes to have multiple environments, IaC will be a must to make sure that environments are similar. As a common rule, they have to be as similar as possible. For that end, a central infra repo using Pulumi will be set up to:

• Provision resources

• Deploy k8s common configuration

This repo will have CICD configured with OIDC authentication.

CI/CD

Github Actions will be the tool of choice to deploy.