Buffer-Inspired Lab: Floci, GitOps and Per-PR Previews

Buffer-Inspired Lab: Floci, GitOps and Per-PR Previews An architecture diagram generated by Archify. Developer / Reviewer · Mac browser + CLI · Architecture component Developer / Reviewer Mac browser + CLI Floci AWS API · EKS · SQS · ECR · safety APIs · Local Floci AWS emulator · loopback :4566 · account 000000000000 Floci AWS API EKS · SQS · ECR · safety APIs loopback :4566 · account 000000000000 Safety Plane · SNS · Lambda · Step Functions · Local Floci AWS emulator · DynamoDB + S3 evidence Safety Plane SNS · Lambda · Step Functions DynamoDB + S3 evidence Floci EKS → K3s · single Ready control plane · Ubuntu single-node BIBE platform · pinned node 172.31.0.3 Floci EKS → K3s single Ready control plane pinned node 172.31.0.3 GitHub Pull Request · same repository + label · Architecture component · bibe-preview GitHub Pull Request same repository + label bibe-preview GitHub Actions · build web / API / worker · Architecture component · exact head SHA GitHub Actions build web / API / worker exact head SHA GHCR · public or private images · Architecture component · sha-COMMIT GHCR public or private images sha-COMMIT Argo CD + Helm · ApplicationSet + trusted chart · Ubuntu single-node BIBE platform · sync · self-heal · prune Argo CD + Helm ApplicationSet + trusted chart sync · self-heal · prune Public Preview Edge · GoDaddy DNS · wildcard TLS · Ubuntu single-node BIBE platform · Nginx Basic Auth Public Preview Edge GoDaddy DNS · wildcard TLS Nginx Basic Auth Cluster Platform · ingress · ExternalDNS · KEDA · Ubuntu single-node BIBE platform · Reflector + policies Cluster Platform ingress · ExternalDNS · KEDA Reflector + policies Per-PR Application · web · API · Jobs · FFmpeg worker · Ubuntu single-node BIBE platform › Restricted per-PR namespace · KEDA worker 0–2 Per-PR Application web · API · Jobs · FFmpeg worker KEDA worker 0–2 Preview Data Plane · PostgreSQL · Redis · MinIO · Ubuntu single-node BIBE platform › Restricted per-PR namespace · 3 isolated PVCs Preview Data Plane PostgreSQL · Redis · MinIO 3 isolated PVCs AWS CLI floci-local emulated AWS APIs freeze + exact cleanup EKS-shaped create manage PR pull_request event push immutable images poll eligible PR reconcile desired state pull exact SHA HTTPS review authenticated proxy host + path routing SQL · queue · objects Local Floci AWS emulator Ubuntu single-node BIBE platform Restricted per-PR namespace Legend Backend Database Cloud Security External

Floci and Kubernetes foundation

  • • Gates A–D proved fail-closed recovery and restart persistence
  • • Floci exposes EKS, SQS and ECR APIs; the retained runtime is local K3s
  • • Helm, quotas, Pod Security and NetworkPolicies bound each preview

GitOps lifecycle

  • • PR previews pull exact-SHA GHCR images; local Compose pulls Floci ECR copies
  • • Merge, close or label removal prunes Application, namespace and DNS

Current full-stack proof

  • • OpenReview adds web, API, KEDA-scaled worker, PostgreSQL, Redis and MinIO
  • • Floci SQS drives 0–2 FFmpeg workers; local Compose uses Floci ECR images