Kubernetes-native CI/CD platform built with Tekton and Flux for secure, reproducible, GitOps-driven software delivery.
| Component | Role |
|---|---|
| Tekton | CI pipelines |
| Flux | GitOps delivery |
SOPS + age. Private key in .secrets/age.agekey; load with go-task sops:age:secret. Encrypt with go-task sops:encrypt FILE=....
Pipelines-as-Code is exposed via Cloudflare Tunnel. Hostname and tunnel config are SOPS-encrypted under infra/network/cloudflared/.
tkn pac bootstrap github-app --routeurl https://<pac-hostname>Install the App on target repos, add a Repository CR, and put pipelines in .tekton/.