ciguard topology

3 services · 4 environments · 5 deploy edges · 4 transitions · 2 secret scopes · 2 network segments
service
dev
development
eu-west-1
test
test
eu-west-1
staging
staging
eu-west-1
prod
production
eu-west-1
dev required_status_check
test required_status_check
staging manual_approval
prod
api
example/api
no gates
.github/workflows/deploy-dev.yml
branch_protection
.github/workflows/deploy-staging.yml
manual_approval required_reviewer branch_protection
.github/workflows/deploy-prod.yml
web
example/web
manual_approval
.github/workflows/web-deploy.yml
worker
example/worker
no gates
.gitlab-ci.yml

Secret-scope blast radius

scopeenvironmentsservices
prod-db
Production database credentials
prodapi worker
shared-monitoring
Datadog API key shared across all envs
dev test staging prodapi web worker

Network reachability

segmentcan reach
shared
CI runners + dev environments
production
production
Production-class workloads
isolated