gitops-lab
by huseyindeniz
Overview
A GitOps lab demonstrating multi-cluster application deployment and management (local-management, local-staging, local-production) for AI/ML inference (image background removal), multiplayer gaming, and .NET microservices using Argo CD, Helm, Istio, and related Kubernetes tooling.
Installation
docker compose -f apps/sample-ai/docker-compose.yml up --buildEnvironment Variables
- FLASK_ENV
- COMMAND
- PORT
- RUN_ON_GPU
- ALLOWED_EXTENSIONS
- MODELS_FOLDER
- UPLOAD_FOLDER
- OUTPUT_FOLDER
- HARBOR_ADMIN_PASSWORD
- REGISTRY_HTTP_SECRET
- CSRF_KEY
- JOBSERVICE_SECRET
- ASPNETCORE_ENVIRONMENT
- DB__HOST
- DB__PORT
- DB__NAME
- DB__USER
- DB__PASSWORD
- MIGRATION_ACTION
- TARGET_MIGRATION
- OLLAMA_MODELS
- VITE_ROUTER_USE_HASH
- VITE_WALLET_DISABLE_SIGN
- VITE_WALLET_SIGN_TIMEOUT_IN_SEC
- VITE_WALLET_SLOW_DOWN_IN_MS
- VITE_API_BASE_URL
- VITE_GAME_SERVER_SOCKET_URL
- NODE_ENV
- REDIS_HOST_URL
- REDIS_HOST_PORT
- TEST_ROOM_CAPACITY
- WF_API_BASE_URL
Security Notes
Critical security risks are present due to hardcoded sensitive credentials (e.g., 'Harbor12345' for Harbor, 'minio123' for MinIO) directly within Helm values files. These are used for critical infrastructure components like the container registry, object storage, and logging storage across both staging and production configurations. Additionally, the metrics server in the 'local-production' environment is configured with '--kubelet-insecure-tls', which is an insecure practice. While the frontend includes Web3 wallet signing, client-side signature verification is noted as a potential weakness if not complemented by robust server-side authentication.
Similar Servers
flux-operator
Manages the lifecycle of Flux CD deployments on Kubernetes clusters and provides an AI-assisted interface for GitOps workflows through the Model Context Protocol (MCP) server.
tfmcp
A CLI tool enabling LLMs to interact with and manage Terraform infrastructure through the Model Context Protocol (MCP), offering advanced analysis and security features.
facets-module-mcp
This MCP (Model Context Protocol) server enables AI agents to assist developers in generating, validating, testing, and managing Terraform modules for infrastructure-as-code within the Facets.cloud platform.
mcp-server-deployments
Manages Kubernetes deployments for multiple MCP servers using a GitOps approach with ArgoCD.