Demo

See the platform work

A click-through of the portal, the code behind it, and a link to the live platform.

View the code Open live platform

The live platform runs Weekdays 09:00–18:00 CET — it’s switched off outside those hours.

The live demo is read-only: nothing you click creates anything. Create ends in a “nothing was created” dialog, edits are disabled, the Applications page is sample data, and no cloud credentials sit behind it.

What’s in the repo

backstage-idp

The portal side of the platform. One golden path creates a running app — a Node.js API or a React frontend — and the rest request infrastructure: Crossplane claims on the Azure side, Terraform module calls for Azure, AWS and STACKIT clusters, plus OpenChoreo templates.

idp-gitops

The runtime side: a local kind cluster, ArgoCD, monitoring, Crossplane, and the discovery rules that deploy new services without anyone editing this repo by hand.

crossplane-modules

Azure blueprints for Crossplane: XRDs + Compositions, no platform wiring around them — each module shows a different pattern you run into once you go past the trivial stuff.

terraform-modules

Infra modules for the demo. Local (free) and cloud versions of the same thing, so swapping source= is basically the whole migration.

team-alpha

A product team's own infrastructure repo, kept separate from idp-gitops on purpose: the platform team owns the cluster and blueprints; a product team owns what it requested, and can review/merge its own infra without commit access to the platform.

Walkthrough

  1. 1

    Start on the home dashboard

    A navy-themed portal with the iceberg brand. A pop-up tells you up front that the demo is read-only.

  2. 2

    Open Applications

    An OpenChoreo-style view of projects, components and their deploy status per environment: development, staging, production. This page is sample data, labelled as such.

  3. 3

    Click through

    Project overview, a Deploy tab per component (promotion is disabled), an environment detail drawer, and a Guardrails view per namespace.

  4. 4

    Try Create

    Eight templates, every input prefilled, so you can go straight to Review. Create shows a “nothing was created” dialog and edits are disabled.

The eight templates

New application (golden path)

A Node.js API or a React frontend. CI is the reusable building block; every build opens a deploy PR that ArgoCD rolls out.

CI/CD Building Block

A pull request adding a caller of the shared reusable CI workflow to an existing repo: build and test, Trivy gate, SBOM, optional image.

Web App Platform Blueprint (Azure)

A multi-module Crossplane claim for App Service, web app and Application Insights, sized S/M/L. ArgoCD syncs the claim.

Azure AKS Cluster

A pull request calling the aks-cluster Terraform module. Opened for review; never applied on the demo.

AWS EKS Cluster

A pull request calling the aws-eks Terraform module. CI runs fmt and validate; nothing applies it.

StackIT SKE Cluster (Sovereign EU)

A pull request calling the stackit-ske Terraform module, the sovereign EU option. Opened for review; never applied.

OpenChoreo Team Namespace with Guardrails

Kustomize: tenancy plus per-environment namespaces with quotas, default-deny network policies, RBAC and an External Secrets store.

OpenChoreo Deployment Blueprint (Helm)

A Helm chart with per-environment values: Deployment or CronJob, Service, HTTPRoute, NetworkPolicy, ExternalSecret, HPA and PDB.