Complete GitOps Project on Kubernetes | ArgoCD + GitHub Actions + Terraform (Real-World Demo)

𝐂𝐥𝐨𝐮𝐝𝐊𝐢𝐭𝐜𝐡𝐞𝐧 — 𝐅𝐮𝐥𝐥-𝐒𝐭𝐚𝐜𝐤 𝐌𝐮𝐥𝐭𝐢-𝐌𝐢𝐜𝐫𝐨𝐬𝐞𝐫𝐯𝐢𝐜𝐞𝐬 𝐅𝐨𝐨𝐝-𝐃𝐞𝐥𝐢𝐯𝐞𝐫𝐲 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦: CloudKitchen is a cloud-native microservices food-delivery application where users can browse restaurants, add items to their cart, place orders, make payments, and track deliveries — similar to Swiggy, Zomato, or Uber Eats. The main focus of this project is to showcase a complete end-to-end DevOps lifecycle on Google Cloud Platform using 𝐆𝐢𝐭𝐎𝐩𝐬. 🏗️ 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 — The app is built using 𝐦𝐢𝐜𝐫𝐨𝐬𝐞𝐫𝐯𝐢𝐜𝐞𝐬 𝐚𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 with 9 services — a React frontend and 8 Go backend services (auth, user, restaurant, menu, order, payment, delivery, notification). Data is stored in PostgreSQL with 8 separate schemas (one per service) inside a single shared database — 12 tables in total. 𝐍𝐀𝐓𝐒 𝐉𝐞𝐭𝐒𝐭𝐫𝐞𝐚𝐦 is used as an async event bus for inter-service communication (e.g., order.placed → payment + notification services subscribe and react), and Redis handles session caching. ☸️ 𝐊𝐮𝐛𝐞𝐫𝐧𝐞𝐭𝐞𝐬 & 𝐈𝐧𝐟𝐫𝐚𝐬𝐭𝐫𝐮𝐜𝐭𝐮𝐫𝐞 — Everything runs on 𝐆𝐨𝐨𝐠𝐥𝐞 𝐊𝐮𝐛𝐞𝐫𝐧𝐞𝐭𝐞𝐬 𝐄𝐧𝐠𝐢𝐧𝐞 (𝐆𝐊𝐄). The GCP infrastructure (VPC, subnets, firewalls, Cloud NAT, Artifact Registry, bastion VM, and static IP) is created using 𝐓𝐞𝐫𝐫𝐚𝐟𝐨𝐫𝐦 with a clean modular structure. The application is deployed using a custom 𝐇𝐞𝐥𝐦 𝐜𝐡𝐚𝐫𝐭 that creates 51 Kubernetes resources with one command — 9 Deployments, 2 StatefulSets (Postgres + NATS), 12 Services, ConfigMaps, Secrets, HPAs, and one Traefik IngressRoute with path-based routing. ⚙️ 𝐂𝐈/𝐂𝐃 𝐰𝐢𝐭𝐡 𝐆𝐢𝐭𝐇𝐮𝐛 𝐀𝐜𝐭𝐢𝐨𝐧𝐬 + 𝐀𝐫𝐠𝐨𝐂𝐃 — Continuous Integration is handled by 𝐆𝐢𝐭𝐇𝐮𝐛 𝐀𝐜𝐭𝐢𝐨𝐧𝐬 and Continuous Delivery by 𝐀𝐫𝐠𝐨𝐂𝐃 — following the true 𝐆𝐢𝐭𝐎𝐩𝐬 pattern. The CI pipeline builds all 9 Docker images in parallel using a matrix strategy, scans them with 𝐓𝐫𝐢𝐯𝐲 for HIGH/CRITICAL vulnerabilities, pushes them to Artifact Registry, and commits the new image tags back to the repository. ArgoCD (running inside the cluster) detects the commit, re-renders the Helm chart, and automatically rolls out the new pods — with zero manual kubectl or helm upgrade steps. Uses the 𝐀𝐩𝐩-𝐨𝐟-𝐀𝐩𝐩𝐬 pattern with 5 child Applications managing the app, ingress, TLS, monitoring, and logging stacks. 📊 𝐌𝐨𝐧𝐢𝐭𝐨𝐫𝐢𝐧𝐠 & 𝐋𝐨𝐠𝐠𝐢𝐧𝐠 — Set up with Prometheus, Grafana, Alertmanager, Loki, and Promtail. Each service exposes a /metrics endpoint that Prometheus scrapes every 15 seconds. Grafana shows 8 custom per-service dashboards with request rate, error rate, latency (p50/p95/p99), CPU, memory, and live logs — all on one screen. Promtail runs as a DaemonSet on every node collecting container logs and shipping them to Loki. Alertmanager fires alerts on pod failures, high 5xx error rates, high latency, or crash-loops. 🔒 𝐇𝐓𝐓𝐏𝐒 & 𝐒𝐒𝐋 — Handled by 𝐜𝐞𝐫𝐭-𝐦𝐚𝐧𝐚𝐠𝐞𝐫 with 𝐋𝐞𝐭'𝐬 𝐄𝐧𝐜𝐫𝐲𝐩𝐭. Free browser-trusted SSL certificates are issued automatically via the HTTP-01 challenge, and Traefik terminates TLS on port 443. All HTTP traffic is permanently redirected to HTTPS with a 308 Redirect middleware, and certificates auto-renew every 75 days — zero manual intervention. 🌐 𝐃𝐍𝐒 & 𝐃𝐨𝐦𝐚𝐢𝐧 𝐀𝐜𝐜𝐞𝐬𝐬 — The application is accessible through a custom domain managed via 𝐆𝐨𝐃𝐚𝐝𝐝𝐲 𝐃𝐍𝐒 pointing to the Traefik LoadBalancer's static IP. All components — the food-delivery frontend, all 8 backend APIs, ArgoCD, Grafana, Prometheus, and Alertmanager — are accessible under the same domain with different URL paths, all secured with HTTPS. 📌 𝐏𝐫𝐨𝐣𝐞𝐜𝐭 𝐒𝐨𝐮𝐫𝐜𝐞 𝐂𝐨𝐝𝐞 & 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐖𝐢𝐭𝐡 𝐌𝐞 🔗 𝐆𝐢𝐭𝐇𝐮𝐛 𝐑𝐞𝐩𝐨𝐬𝐢𝐭𝐨𝐫𝐲: https://github.com/vijaygiduthuri/clo... 💼 𝐋𝐢𝐧𝐤𝐞𝐝𝐈𝐧: www.linkedin.com/in/vijay-giduthuri-ab9075222 ✍️ 𝐌𝐞𝐝𝐢𝐮𝐦 𝐁𝐥𝐨𝐠𝐬:   / vijaygiduthuri67   #DevOps #DevSecOps #CloudComputing #GoogleCloud #GCP #GKE #Kubernetes #Microservices #CloudNative #Docker #Containers #Terraform #InfrastructureAsCode #IaC #Helm #HelmCharts #GitHubActions #CICD #ArgoCD #GitOps #AppOfApps #Traefik #IngressController #Prometheus #Grafana #Monitoring #Observability #Alertmanager #Loki #Promtail #Logging #LetsEncrypt #cert-manager #HTTPS #SSL #NATS #JetStream #EventDriven #Golang #ReactJS #PostgreSQL #Redis #Nginx #LoadBalancer #ArtifactRegistry #Trivy #SoftwareEngineering #PortfolioProject