Skip to main content

Organization Foundation

The landscape scaffolding: the top-level Organization, an OrganizationalUnit, its Environments, a Project, and a ReleaseTrack. These are usually owned by the platform team.

Organization​

# manifests/organization.yaml
apiVersion: lowops.manifests.v1
kind: Organization
metadata:
  name: fincorp
spec:
  hibernation:
    hibernate: false
  defaultRegion: us-central1
  domain:
    external: fincorp.io
    internal: fincorp.internal
  github:
    organization: fincorp-eng
    repositoryPrefix: fincorp
  workforceFederation:
    infrastreamManaged:
      domain: fincorp.io

OrganizationalUnit​

# manifests/organizational-unit/retail-banking/retail-banking.yaml
apiVersion: lowops.manifests.v1
kind: OrganizationalUnit
metadata:
  name: retail-banking
  organization: fincorp
spec:
  displayName: Retail Banking
  permissions:
    administrators:
      groups:
        - retail-cloudops

Environment​

# manifests/organizational-unit/retail-banking/environment/prod/prod.yaml
apiVersion: lowops.manifests.v1
kind: Environment
metadata:
  name: prod
  organizational-unit: retail-banking
  organization: fincorp
spec:
  displayName: Retail Banking Production

Project​

# manifests/organizational-unit/retail-banking/environment/prod/project/login-svc.yaml
apiVersion: lowops.manifests.v1
kind: Project
metadata:
  name: login-svc
  environment: prod
  organizational-unit: retail-banking
  organization: fincorp
spec:
  displayName: Login Service
  defaultUrlRedirect: https://fincorp.io
  # Outbound allow-list (zero-trust egress). Optional.
  allowedEgress:
    - "*.googleapis.com"

ReleaseTrack​

The ordered path a version follows through environments, with approval gates between stages.

# manifests/organizational-unit/retail-banking/release-track/main-track/main-track.yaml
apiVersion: lowops.manifests.v1
kind: ReleaseTrack
metadata:
  name: main-track
  organizational-unit: retail-banking
  organization: fincorp
spec:
  description: "Primary delivery pipeline for retail banking services."
  preReleaseStages:
    - environments:
        - dev
    - environments:
        - dev-qa
      approval_policy:
        stakeholder:
          group_email: retail-devops
  releaseStages:
    - environments:
        - uat
      approval_policy:
        stakeholder:
          group_email: retail-devops-leads
    - environments:
        - prod
      approval_policy:
        stakeholder:
          group_email: retail-cloudops-leads