GitOps Platform Portal

aioo · shared.aiootech.com · eu-central-1
6 of 8 services live

Every platform web surface, grouped by function. All served through the platform Envoy Gateway with cert-manager TLS; identity brokered by Keycloak SSO. Desired state lives in Git — platform/gitops-federation — and is reconciled by Argo CD.

01 · Pipeline

Source & Delivery

2 services
GL
GitLabLIVE
Git hosting, merge requests & CI/CD pipelines. The platform's source-of-truth remote.
gitlab.shared.aiootech.com →
AR
Argo CDLIVE
GitOps continuous delivery — app-of-apps & ApplicationSets reconciling every namespace from Git.
argocd.shared.aiootech.com →
02 · Trust

Identity & Secrets

2 services
KC
KeycloakLIVE
Human SSO / identity broker (realm platform), fronting Google Workspace. OIDC for every console here.
keycloak.shared.aiootech.com →
OB
OpenBaoBASTION
Secrets, KV & PKI backing External Secrets. UI reached through the SSM bastion tunnel — no public route by policy.
via make vault-bastion →
03 · Build outputs

Artifacts, Registry & Quality

3 services
HB
HarborLIVE
Container image registry with Trivy scanning & signing. Layers on S3, HA components.
harbor.shared.aiootech.com →
NX
NexusLIVE
Maven & raw artifact repository — hermetic proxy for builds, hosted release/snapshot stores.
nexus.shared.aiootech.com →
SQ
SonarQubeLIVE
Merge-blocking code-quality gates & static analysis, wired into the CI pipeline.
sonar.shared.aiootech.com →
04 · Operate

Observability & On-call

2 services
GF
GrafanaDOWN
Metrics, logs & traces dashboards (Thanos / VictoriaLogs / Tempo). Currently returning 500 at the gateway.
grafana.shared.aiootech.com →
GA
GoAlertDOWN
On-call scheduling & alert routing / escalation. Currently returning 500 at the gateway.
oncall.shared.aiootech.com →