A cloud platform that teams can operate themselves.

Kubernetes, GitOps and open components underpin repeatable deployments and ownership within development teams.

Discuss a similar challenge
Simplified GitOps diagram, based on the technical implementation.

The context and the role

Practical experience by Pascal van der Horst in his role at Wigo4it.

Platform engineering · GitOps · Identity

From cloud infrastructure to an operational platform

Cloud infrastructure alone does not make a team independent. Deployment, security, operational visibility and maintenance need to work together. At Wigo4it, the platform supports development teams in building, running and maintaining their services.

The contribution: architecture and implementation

Pascal worked on Kubernetes platforms, infrastructure as code and the move to GitOps with Argo CD. This also included observability, vulnerability scanning and guidance for the squads. Technical decisions form part of the same responsibility as handover and day-to-day operations.

Repeatable configuration and traceable changes

The published technical implementation describes five AKS clusters managed from one Git repository. ApplicationSets, Kustomize and Helm support onboarding and configuration of the infra and worker cluster families. A separate practical article explains the synchronisation chain between AFAS, Keycloak and Entra ID.

Implemented in practice

The contribution summarised as technical and practical deliverables.

  • Kubernetes platforms with version-controlled configuration and GitOps through Argo CD.
  • Infrastructure automation with Terraform and OpenTofu.
  • Observability using the LGTM stack and vulnerability scanning with Trivy Operator.
  • Technical knowledge sharing and support for development teams.

Further reading

Five AKS clusters, one Git repository Taking greater control of identity Identity Sync Architecture — developer.overheid.nlDutch Azure Meetup — Wigo4it

A similar challenge?

An initial conversation clarifies the decisions, technology and support needed. Direct contact with the specialist responsible for advice and implementation.