Docs · Glidepath
Glidepath: admin guide
Documentation for people running this platform - installing it, operating it, and understanding why it’s built the way it is. If you’re an application developer using an already-running platform, see ../user/ instead.
Start here
| Doc | Read this when… |
|---|---|
| architecture.md | You want the current-state system overview. |
| security.md | You want the security model end to end - threat model, RBAC, supply chain, known gaps. |
| installation.md | You’re installing this platform on a cluster. |
| onboarding-mechanics.md | You’re registering a new app onto an already-running platform. |
| adr/ | You want to know why a specific decision was made this way. |
Reference
Grouped by concern - each is a standalone deep-dive, cross-linked from architecture.md wherever relevant.
Chaining & multi-cluster
- chaining.md - the CDEvents broker and TokenReview auth mechanism
- multi-cluster.md - staging/prod topology, ArgoCD-per-cluster
- concepts.md - terminology (Application, flow, stage)
Governance & supply chain
- governance-stubs.md - the stub→real gate mechanism
- image-signing.md - Fulcio/cosign keyless signing
- provenance-policy.md - SLSA attestation policy
- commit-signing.md - gitsign commit verification
- rootless-builds.md - kaniko under Pod Security
restricted
Release & operations
- release.md - the GitOps promotion flow, step by step
- release-guardrails.md - adding/removing a release-PR gate
- catalog-versioning.md - promoting shared catalog changes
- pipelinerun-pruner.md - PipelineRun history cleanup
- stalled-pipeline-detector.md - stuck-flow alerting
Observability
- tracing.md - OpenTelemetry span/trace stitching across stages
- dora-metrics.md - deployment frequency/lead time/CFR/MTTR
- tekton-results.md - long-term PipelineRun/TaskRun archival (logs
- full run history)
- OTEL_AND_CDEVENTS_FLOW.md, OTEL_CDEVENTS_COMPLETE_EXAMPLE.md, OTEL_CDEVENTS_DEBUGGING_GUIDE.md - deep debugging reference for the tracing/CDEvents plumbing
Notifications & secrets
- notifications.md, design-language.md - Slack/GitHub notification content and shared visual language
- secrets-management.md, app-secrets.md - the ClusterSecretStore/ExternalSecrets model
- ephemeral-environments.md - per-branch/PR preview envs
- naming-conventions.md - namespace/resource naming rules
See ../archive/ for the original, unabridged design history these docs and the ADRs were distilled from.