Golden Path
Production platform on Azure AKS, deployed GitOps-style. Terraform for infrastructure, GitHub Actions + OIDC for CI/CD, Trivy in the pipeline, Prometheus/Grafana for observability.
Problem
A real platform-engineering showcase — not a toy demo. The goal: a production-grade platform on a public cloud, deployed entirely through GitOps and CI/CD, with live traffic and real observability.
Approach
Azure infrastructure provisioned with Terraform (AKS, networking, identity). GitHub Actions builds and ships with OIDC federation — no long-lived cloud credentials. ArgoCD watches the Git repo and syncs the cluster to the declared state. Trivy scans images in the pipeline. Prometheus + Grafana collect and visualize cluster metrics.
Architecture — Azure AKS + GitOps
Results
- Live at ilhaamghiffari.tech — phases 1–3 shipped end-to-end
- Push to main → built, scanned, and deployed with zero manual steps
- Everything as code: infrastructure, deployment, and configuration
- Cloud credentials replaced by short-lived OIDC tokens
Stack
TerraformAzure AKSKubernetesArgoCDGitHub ActionsOIDCTrivyPrometheusGrafana