| Field |
Value |
| Owner |
Anthony |
| Criticality |
Medium |
| Runtime |
React frontend, Node/Bun backend, Nginx proxy |
| Delivery |
GitLab CI/CD, Docker, Helm and Argo CD |
Weather App is the application used to demonstrate DevSecOps engineering practices. It exposes a
frontend for weather lookup and a backend that normalizes calls to the external weather provider.
| Page |
Scope |
| Architecture |
Runtime request flow, CI/CD evidence flow and environment model |
| CI/CD |
Pipeline stages, quality gates, artifact promotion and testing |
| Security Controls |
Source, container, runtime, Kubernetes and access controls |
| VPS Deployment |
Staging deployment with Traefik, WAF, HTTPS and monitoring |
| Kubernetes GitOps |
Validation cluster, policies, NetworkPolicies, RBAC and GitOps |
| Backend Health Runbook |
Healthcheck troubleshooting steps and evidence to collect |
| Cloudflare SSH Access |
Zero Trust SSH flow for self-hosted GitLab access |
- Open-Meteo API for weather data.
- GitLab registry for built images.
- Internal service token between the frontend proxy and backend.
- Kubernetes platform for GitOps, policy and network-isolation validation.
- Check the application runbook.
- Inspect GitLab pipeline evidence.
- Inspect platform health if the application is deployed on Kubernetes.