Argo CD Production GitOps Architecture Diagram

Self-managed production control plane

Argo CD reconciles envs/prod from its own GitLab repository into the local cluster
Automated sync, namespace creation, and server-side apply are enabled for the Argo CD Application
The base installs upstream stable manifests in the argocd namespace and pins Redis to 7.2.7-alpine

Cluster-wide application fleet

Production declares platform services including ingress, certificates, storage, databases, monitoring, logging, AWX, and Kasten
Several ApplicationSets use the registered-cluster generator to deploy environment-specific paths to every registered cluster
AppProjects separate infrastructure, SIMS, ICS Software, and Digital Solutions authorization scopes

Identity and secret delivery

Dex authenticates ESS users and groups through LDAP with StartTLS
Argo CD RBAC maps ESS groups to read and sync permissions
Vault Secrets Operator materializes TLS, LDAP bind, repository, and remote-cluster credentials

Scope and observability

A ServiceMonitor scrapes Argo CD controller, server, and repository metrics every 30 seconds
The production overlay publishes an Argo CD overview dashboard for Grafana discovery
This view reflects declarative Git configuration at the pinned revision, not observed live-cluster state