Back to Home
huseyindeniz icon

gitops-lab

by huseyindeniz

Overview

A GitOps lab demonstrating multi-cluster application deployment and management (local-management, local-staging, local-production) for AI/ML inference (image background removal), multiplayer gaming, and .NET microservices using Argo CD, Helm, Istio, and related Kubernetes tooling.

Installation

Run Command
docker compose -f apps/sample-ai/docker-compose.yml up --build

Environment Variables

  • FLASK_ENV
  • COMMAND
  • PORT
  • RUN_ON_GPU
  • ALLOWED_EXTENSIONS
  • MODELS_FOLDER
  • UPLOAD_FOLDER
  • OUTPUT_FOLDER
  • HARBOR_ADMIN_PASSWORD
  • REGISTRY_HTTP_SECRET
  • CSRF_KEY
  • JOBSERVICE_SECRET
  • ASPNETCORE_ENVIRONMENT
  • DB__HOST
  • DB__PORT
  • DB__NAME
  • DB__USER
  • DB__PASSWORD
  • MIGRATION_ACTION
  • TARGET_MIGRATION
  • OLLAMA_MODELS
  • VITE_ROUTER_USE_HASH
  • VITE_WALLET_DISABLE_SIGN
  • VITE_WALLET_SIGN_TIMEOUT_IN_SEC
  • VITE_WALLET_SLOW_DOWN_IN_MS
  • VITE_API_BASE_URL
  • VITE_GAME_SERVER_SOCKET_URL
  • NODE_ENV
  • REDIS_HOST_URL
  • REDIS_HOST_PORT
  • TEST_ROOM_CAPACITY
  • WF_API_BASE_URL

Security Notes

Critical security risks are present due to hardcoded sensitive credentials (e.g., 'Harbor12345' for Harbor, 'minio123' for MinIO) directly within Helm values files. These are used for critical infrastructure components like the container registry, object storage, and logging storage across both staging and production configurations. Additionally, the metrics server in the 'local-production' environment is configured with '--kubelet-insecure-tls', which is an insecure practice. While the frontend includes Web3 wallet signing, client-side signature verification is noted as a potential weakness if not complemented by robust server-side authentication.

Similar Servers

Stats

Interest Score34
Security Score3
Cost ClassHigh
Avg Tokens100000
Stars4
Forks0
Last Update2025-12-07

Tags

GitOpsKubernetesArgoCDAI/ML InferenceImage ProcessingFlaskPythonHelmMicroservicesObservabilityWeb3 IntegrationContainer Registry