Production plan proposal and discussion

[janhalen]

Production plan:

This issue relates to the deployment of the complete stack with os2ID(Authentik) and os2samtale(Zulip)

Proposal for items that needs to be discussed and agreed upon:

• Organizational and Repository Structure

  • Overview of repository organization
  • Environment-specific repositories

• Technical Documentation and Architecture

  • Onboarding guides for using the deployment templates
  • Architectural diagrams to help understand the stack

• Access Control and Branch Protections

  • Maintainable role-based access control (RBAC) in the repos
  • Branch protection rules
  • Code ownership and review processes

• Secrets Management

  • Strategies for storing and accessing secrets
  • Integration with secrets management tools

• Upgrading / Image Handling and Security

  • External image scanning and vulnerability assessment using CI in the repos
  • Accepting and maintaining image sources/fixed versions in the charts

[janhalen]

@mikkeschiren: I have drafted some initial points here for getting the stack into production (on the technical side)