← All work

(01) Personal project · Jul 2026

Platform Pipeline: Self-Hosted CI/CD, GitOps and Observability

A complete DevOps platform that runs on a laptop: Jenkins as code with quality and security gates, Terraform-managed kind, Argo CD GitOps with automatic rollback, and full observability. Zero cloud credentials.

The project

A locally runnable DevOps platform built around a two-service Go application. Jenkins is configured entirely as code (plugins.txt, JCasC and Job DSL) and runs build, unit tests, a SonarQube quality gate, Gitleaks secret scanning, the image build, a Syft SBOM and a Trivy vulnerability gate before pushing to a local registry.

Terraform with local state provisions the whole environment: the Docker network, the registry, a kind cluster, namespaces, and the Argo CD and kube-prometheus-stack Helm releases. No cloud account is needed at any point.

Delivery is GitOps. Argo CD reconciles a Kustomize deploy folder from a local Gitea; Jenkins releases by committing an image tag bump, and a post-deploy health gate reverts the release commit automatically if the new version never becomes healthy.

Highlights

  1. 01Jenkins fully as code: plugins, JCasC and Job DSL
  2. 02Quality and security gates: SonarQube, Gitleaks, Syft SBOM, Trivy
  3. 03Argo CD GitOps with an automatic rollback on failed health checks
  4. 04kube-prometheus-stack with a provisioned dashboard, ServiceMonitors and PrometheusRule alerts
  5. 05Validated with scripted traffic, pod failure and failed release demos