Interprise-OnPremShopPay

Interprise-OnPremShopPay a production-style on-premises microservices platform designed with Zero Trust, GitOps, and Cloud Native principles.

Project by the Numbers

8 Kubernetes Namespaces for complete workload isolation

40+ Calico Network Policies enforcing Zero Trust networking

5 Horizontal Pod Autoscalers (HPA) for automatic workload scaling

100% Dynamic Secret Injection with HashiCorp Vault (zero hardcoded secrets)

4 Dedicated PostgreSQL Databases (Database-per-Service architecture)

1 Kong API Gateway securing and routing all external traffic

5+ Monitoring Components (Prometheus, Grafana, Alertmanager, Node Exporter, Kube State Metrics)

GitOps Continuous Delivery powered by Argo CD and Helm

100% Container Image Scanning using Trivy before deployment

100% Hardened Containers running as non-root with read-only root filesystem, seccomp, and dropped Linux capabilities

Production-Ready High Availability achieved through multi-replica workloads, Kubernetes self-healing, rolling updates, readiness/liveness probes, and automatic scaling with HPA to minimize downtime and ensure service continuity.

Core Technologies

Enterprise-grade Zero Trust Architecture

Kubernetes-based microservices running in isolated namespaces

Calico Network Policies with default-deny security model

HashiCorp Vault for runtime secret injection

Horizontal Pod Autoscaler (HPA)

GitOps with Argo CD & Helm

Kong API Gateway

Prometheus, Grafana & Alertmanager

Trivy integrated into GitLab CI/CD