Skip to content

DevOps / GitOps — deployment

Target

This page describes intended behaviour or structure. No implementation is claimed unless a section is explicitly marked Current implementation or Evidence.

Rewritten 2026-10-09 (design plan P10)

The June-2026 page (pipeline, GitOps and IaC services as separate deployables) is archived under catalogs 2026-06.

Host Modules Topologies
DeliveryHost 5 saas-default, hybrid, on-prem, hybrid-compute

Shape

flowchart TB
    subgraph host [DeliveryHost · AKS · 2–6 replicas]
        P[PipelineExecutionService]
        R[ReleaseService]
        E[EnvironmentPromotionService]
    end
    host --> SQL["(delivery-sql)"]
    host --> BLOB["(artifact-blob · SBOMs, attestations, notes)"]
    host <--> INT[IntegrationHost · connectors · webhook gateway GW-06]
    INT <--> SOR["(Azure DevOps / GitHub · tenant's)"]
    E <--> PROV[RuntimeCloudHost · IaCProvisioningService]
    CI[existing CI · ConnectSoft.AzurePipelines · Azure Artifacts · registries] -. publication evidence .-> R
Hold "Alt" / "Option" to enable pan & zoom

Per topology

Topology System of record CI and publication Provisioning target Notes
saas-default tenant's Azure DevOps or GitHub through connectors tenant's pipelines (generated definitions); Azure Artifacts or GitHub Packages; ACR or GHCR the Factory-managed AKS and the tenant's environments webhooks through GW-06
hybrid tenant's tenant's, on their runners the tenant's clusters through Pulumi receipts still flow to the Factory
on-prem Azure DevOps Server or GitHub Enterprise Server through connectors the customer's the customer's the webhook gateway sits inside the customer's network
hybrid-compute as saas-default as saas-default as saas-default no difference for delivery

Data and recovery

  • delivery-sql: RPO 15 min, RTO 4 h (D30); proposals and runs can be re-pulled from the system of record, releases rebuilt from results and registry reads, promotions recovered from approvals and provisioning receipts.
  • Retention: proposals and runs 1 year with the run; releases and promotions for the product's lifetime plus 7 years for evidence references (D31).

Ports and runtime

HTTPS 8120, gRPC 8122, silo 12120, gateway 31120 (messaging profile delivery). Secrets delivery-sql, messaging-transport from Key Vault with 90-day rotation; no system-of-record credentials in this host.