https://github.com/u2i/webapp-team-app
ISO 27001/SOC 2/GDPR compliant webapp application with GitOps deployment pipeline
https://github.com/u2i/webapp-team-app
belgium cloud-deploy compliance gcp gdpr gitops iso27001 kubernetes soc2
Last synced: 9 months ago
JSON representation
ISO 27001/SOC 2/GDPR compliant webapp application with GitOps deployment pipeline
- Host: GitHub
- URL: https://github.com/u2i/webapp-team-app
- Owner: u2i
- Created: 2025-06-16T19:22:47.000Z (10 months ago)
- Default Branch: main
- Last Pushed: 2025-06-16T19:51:46.000Z (10 months ago)
- Last Synced: 2025-06-16T20:39:04.725Z (10 months ago)
- Topics: belgium, cloud-deploy, compliance, gcp, gdpr, gitops, iso27001, kubernetes, soc2
- Language: HCL
- Size: 34.2 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# WebApp Team - Compliant Application Repository
This repository contains the WebApp Team's application deployment infrastructure following ISO 27001, SOC 2 Type II, and GDPR compliance requirements.
## 🏗️ Repository Structure
```
webapp-team-app/
├── .github/workflows/ # GitOps CI/CD workflows for application
├── k8s-manifests/ # Kubernetes application manifests
├── k8s-infra/ # Team-managed infrastructure (RBAC, quotas)
├── configs/ # Environment-specific configurations
├── clouddeploy.yaml # Cloud Deploy pipeline configuration
├── skaffold.yaml # Application build and deploy
├── app.js # Sample application code
├── Dockerfile # Container image definition
└── README.md # This file
```
## 🏗️ Infrastructure Repository
**Infrastructure as Code** is managed separately at:
**[webapp-team-infrastructure](https://github.com/u2i/webapp-team-infrastructure)**
This includes:
- Terraform configuration for the tenant project
- GitOps workflows with Slack approval
- Kubernetes namespace and RBAC setup
- Infrastructure compliance automation
## 🔒 Compliance Features
### ISO 27001 Controls
- **A.12.1.2** Change management via GitOps workflows
- **A.9.4.1** Access restriction through RBAC
- **A.12.4.1** Comprehensive audit logging
- **A.12.6.1** Vulnerability scanning via Binary Authorization
### SOC 2 Type II Requirements
- **CC8.1** Change control with approval gates
- **CC6.1** Logical access controls
- **CC6.6** Audit logging and monitoring
- **CC7.2** Continuous monitoring
### GDPR Compliance (EU/Belgium)
- **Art. 25** Data protection by design
- **Art. 32** Security of processing
- **Data residency** in EU (europe-west1)
## 🚀 Deployment Workflow
### Development Flow
1. **Feature branch** → Create PR
2. **Automated checks** → Compliance validation, security scanning
3. **Code review** → Team approval required
4. **Merge to main** → Auto-deploy to non-production
### Production Flow
1. **Production release** → Manual promotion from non-prod
2. **Security review** → Automated compliance checks
3. **Approval gate** → Security team approval required
4. **Production deployment** → With full audit trail
## 🔧 Getting Started
### Prerequisites
- Access to `u2i-tenant-webapp` GCP project
- Membership in `webapp-team@u2i.com` Google Group
- GitHub repository access with proper branch protection
### Local Development
```bash
# Build and test locally
docker build -t webapp .
docker run -p 8080:8080 webapp
# Deploy to non-production
gcloud deploy releases create dev-$(date +%Y%m%d-%H%M%S) \
--project=u2i-tenant-webapp \
--region=europe-west1 \
--delivery-pipeline=webapp-delivery-pipeline \
--source=.
```
### Environment Promotion
```bash
# Promote to production (requires approval)
gcloud deploy releases promote \
--project=u2i-tenant-webapp \
--region=europe-west1 \
--delivery-pipeline=webapp-delivery-pipeline \
--release=RELEASE_NAME \
--to-target=prod-gke
```
## 📋 Compliance Checklist
Before each deployment, ensure:
- [ ] All containers have resource limits
- [ ] Security contexts are properly configured
- [ ] Images are from approved registries
- [ ] Secrets are managed via Secret Manager
- [ ] Network policies are in place
- [ ] Audit logging is enabled
## 🆘 Support
- **Team Lead**: webapp-team@u2i.com
- **Security Issues**: security-team@u2i.com
- **Platform Support**: platform-team@u2i.com
- **Compliance Questions**: compliance@u2i.com# Test GitOps Pipeline