Reviewed GitOps and scoped access

Reviewed GitOps and scoped access A sequence diagram generated by Archify. Request reviewed environment Create PR; review and merge Observe merged source Sync chart and values Actual readiness result Report deployment state Show status and approved access path Access with scoped expiring credentials Environment request and PR approval GitOps provisioning Completion notification and access Developer · Environment requester · Sequence participant Developer Environment requester Backstage · Portal / templates · Sequence participant Backstage Portal / templates GitHub · Reviewed GitOps source · Sequence participant GitHub Reviewed GitOps source ArgoCD · ApplicationSet · Sequence participant ArgoCD ApplicationSet vCluster on EKS · Host namespace · Sequence participant vCluster on EKS Host namespace Legend request return default message

GitOps

  • • Prepared templates/actions create a PR
  • • ArgoCD applies reviewed chart and values after merge
  • • A debug log is not approval or readiness waiting

Access and deletion

  • • Never expose kubeconfig credentials in public PRs
  • • Verify endpoints, forwarding lifetime and token expiry
  • • Review application/namespace deletion and retained data