Skip to content

Coordinators — DevOps, Infrastructure & Environments

Generated from the architecture model

This page is rendered from model/**/*.yaml by tools/docs_model during mkdocs build. Edit the YAML, not this page; hand-written design lives on the linked service, platform and plane pages.

The June-2026 coordinators of this family are realized in the 2026 design as workflow definitions executed by the Workflow Engine (BC-38) under Run Control, as capabilities of a service, or are retired because a platform owns the concern outright. A coordinator never runs outside a Factory run: its triggers are events, its gates are approvals of the stated class, and its outputs are events and artifacts with receipts.

InfrastructurePlannerCoordinator

Produces the Infrastructure Blueprint and the Pulumi program (ADR-0004) as generated outputs.

Realization workflow
Owner service WorkflowEngineService
Workflow definition infrastructure-plan
Triggers BlueprintValidated
Inputs module, database, security and observability blueprints
Agents Infrastructure Architect Agent
Gates none (read and sandbox classes only)
Emits GeneratedOutputRecorded
Detailed page this card
Modernization note (2026): Bicep is not a target (ADR-0004).
## SecretsAndIdentityPlanner

Secret references and workload identities are issued by the Secret Broker and the identity platform at apply time.

Realization service-capability
Owner service SecretBrokerService
Workflow definition —
Triggers —
Inputs —
Agents —
Gates none (read and sandbox classes only)
Emits —
Detailed page this card
## EnvironmentSetupCoordinator

Environments are created in Control and provisioned with their baseline by IaCProvisioningService.

Realization service-capability
Owner service EnvironmentService
Workflow definition —
Triggers EnvironmentCreated
Inputs —
Agents —
Gates production approval for production baselines
Emits ProvisioningApplied
Detailed page this card
## PipelineGenerator

Pipeline definitions are generated outputs of the recipe from the Pipeline Blueprint.

Realization service-capability
Owner service GenerationRecipeService
Workflow definition —
Triggers RecipeApproved
Inputs —
Agents —
Gates none (read and sandbox classes only)
Emits GeneratedOutputRecorded
Detailed page this card
## DevOpsAgentCoordinator

Drives build, scan and release steps as a run with the DevOps Agent; deployment is a promotion, never a pipeline stage.

Realization workflow
Owner service WorkflowEngineService
Workflow definition delivery-run
Triggers PipelineRunCompleted
Inputs pipeline results
Agents DevOps Agent
Gates production approval for promotions
Emits PromotionRequested
Detailed page this card
## ResourceMapper

Service needs map to store profiles, pools and SKUs through the Data & Event and capacity catalogs.

Realization service-capability
Owner service StoreProfileService
Workflow definition —
Triggers —
Inputs —
Agents —
Gates none (read and sandbox classes only)
Emits —
Detailed page this card