This document outlines a production-grade GitOps architecture I designed and implemented featuring complete environment isolation, automated CI/CD pipelines, and enterprise security patterns. The solution demonstrates modern infrastructure-as-code practices suitable for high-volume, 24/7 production environments in financial services and other regulated industries.
This implementation uses separate EKS clusters for DEV and PROD environments, each with its own ArgoCD instance and namespace isolation—a pattern ensuring complete blast radius containment and compliance auditability.
DEV issues cannot affect PROD systems
Different IAM roles/policies per environment
Test cluster upgrades on DEV first
PROD requires manual sync (audit trail)
Scale DEV down during off-hours
| Feature | Implementation |
|---|---|
| Multi-Platform Builds | Docker buildx for AMD64 + ARM64 support |
| Automated Testing | Unit tests with coverage reporting before build |
| Semantic Versioning | Automated image tags using GitHub run numbers |
| GitOps Integration | Automated PR to deployment repository |
| Environment Promotion | DEV auto-deploys; PROD requires manual approval |
| Approach | Use Case | Security Level |
|---|---|---|
| Git Secrets | CI/CD build-time only | ⚠️ Good for pipelines |
| K8s Secrets (plain) | Quick testing | ❌ Base64 encoded, not encrypted |
| External Secrets + AWS | Production runtime | ✅ Encrypted, rotatable, audited |
Click any link below to interact with the running applications
/health or /tasks to test the REST API
The API App provides a full REST API for testing. Available endpoints:
| Method | Endpoint | Description |
|---|---|---|
GET |
/api | API info and available endpoints |
GET |
/api/health | Health check |
GET |
/api/tasks | List all tasks |
POST |
/api/tasks | Create a new task |
GET |
/api/echo?message=hello | Echo service for testing |
GET |
/api/protected/stats | Protected endpoint (requires x-api-key header) |
| Metric | Result |
|---|---|
| Deployment Frequency | Multiple per day (DEV), controlled (PROD) |
| Lead Time for Changes | Minutes from commit to DEV deployment |
| MTTR (Rollback) | < 2 minutes via git revert |
| Change Failure Rate | Reduced via automated testing gates |
| Infrastructure Drift | Eliminated via GitOps reconciliation |