cluster-platform/README.md

K8s Cluster Platform — Services

Bootstraps platform/application services (vault, external-secrets, harbor, jenkins, sonarqube, etc.) onto the cluster using ArgoCD app-of-apps pattern.

Run this after cluster-bootstrap finishes (ArgoCD, MetalLB, Envoy Gateway, NFS storage must already be up).

Architecture

Git repo (cluster-platform)
  └── ArgoCD watches platform/apps/ → syncs all Applications

platform-app.yaml       ← root Application, applied once by hand (kubectl apply)
platform/apps/          ← ArgoCD watches this path; one Application CRD per service
manifests/               ← Helm values referenced by those Applications

Bootstrap Sequence

Apply the root platform Application

kubectl apply -f platform-app.yaml

Everything else is reached by ArgoCD syncing platform/apps/ from here.