Cloud & DevOps
Cloud-Native CI/CD Platform
GitOps pipeline with Kubernetes, Helm and progressive delivery
- Kubernetes
- Docker
- Helm
- Argo CD
- +2
Cloud & DevOps · Major Project
Scheduled drift checks on Terraform, and Rego policies that block bad plans
Overview
Two ways infrastructure goes wrong: someone changes it by hand, or someone plans something that should never be allowed. A scheduled workflow runs a Terraform refresh-only plan and opens an issue when live resources no longer match the code. Separately, every plan is exported as JSON and tested with Conftest against Rego policies on tags, encryption and public access. LocalStack covers the demo without a cloud bill.
What makes it stand up
Module breakdown
A small Terraform stack of buckets, security groups and instances.
Refresh-only plans on a schedule with a readable diff.
Rego rules with deny and warn levels and clear messages.
Conftest step that fails a pull request on a deny.
Choosing between re-applying code and adopting the change.
After this, you will be able to
Technology stack
You receive
Keep looking
Cloud & DevOps
GitOps pipeline with Kubernetes, Helm and progressive delivery