Runbooks

Each runbook provides a complete guide, including deployment, validation and testing.

Cloudflare GitOps via Flux

This runbook provides end-to-end instructions for deploying and managing Cloudflare and the Cloudflare CA Issuer to the cluster using GitOps automation via Flux.

• The Origin CA Issuer controller (from Cloudflare’s upstream repository), deployed via Flux.
• A Cloudflare namespace with a locally managed cloudflared tunnel, Origin CA certificates, ingress and NetworkPolicy resources.
• A GitOps flow from GitLab (Flux continuously reconciles everything).
• SOPS to keep Kubernetes Secrets encrypted in Git.
• Full runbook: Cloudflare GitOps via Flux.

---

WordPress GitOps runbook series

This series of runbooks provides end-to-end instructions for deploying one or more WordPress sites to the cluster using GitOps automation via Flux.

1. WordPress GitOps summary
2. WordPress repo and prerequisites
3. WordPress manifests
4. WordPress flux integration
5. WordPress operations, restore and backups

---

Blaster GitOps runbook series

This series of runbooks uses the Blaster demo game as a worked example to show how code moves from local development to Kubernetes dev and prod using GitLab CI (with Kaniko), FluxCD, SOPS-encrypted secrets and image automation.

1. Blaster GitOps summary
2. Blaster repo and branches
3. Dockerfile & GitLab CI
4. Blaster prep for automation
5. Dev app k8s manifests
6. Dev flux sources & Kustomizations
7. Dev image automation
8. Dev SOPS & age
9. Dev verification & troubleshooting
10. Dev full runbook
11. Prod overview
12. Prod app k8s manifests and deployment
13. Prod Flux GitOps and image automation
14. Prod Cloudflare, Origin CA and tunnel routing
15. Prod full runbook
16. Post Git flow