Sources, review scope and traceability¶
Source snapshot¶
Read-only review on 26 October 2026 of the six public projects' default branches. These commits fix the baseline of this documentation:
| Project | Complete commit | Source |
|---|---|---|
web-application/deployments/frontend |
38ef821c0b9d2a2c5536ec1f1d1627206c2fabc6 |
Source |
web-application/deployments/backend |
82148d6303d03f58bbfda2f4196009a282b89d00 |
Source |
web-application/apps/frontend |
1e56e856d4cf36969d7c14153be4ea296deae733 |
Source |
web-application/apps/backend |
2c8e6ef861de7cbaf22aea0b750ea9cc99887e1d |
Source |
terraform-modules |
ae1502b0f4bda7f00bc913f1e7c7ae9df6ddea84 |
Source |
cicd-templates |
642a846691375f118f5d375a4d313048f007d7bd |
Source |
The 293 versioned files were inventoried to identify configuration, dependencies and integration points. Detailed reading focused on 69 infrastructure files, three CI templates, application pipelines, Dockerfiles, POMs, runtime configuration and seven Kubernetes manifests. Frontend visual assets and libraries were inventoried without an exhaustive implementation audit.
The root source-manifest.json records numeric IDs, SHAs, URLs, counts and commit dates. Chapter references point to the reviewed commit when describing code. General product/official documentation links can evolve.
Provided thesis¶
Gabriel Canals — Automatización multinube con Terraform gestionada íntegramente desde GitLab: una propuesta de plataforma DevOps centralizada. Author-provided PDF, 68 pages. Printed and PDF page numbers differ; references give both when needed.
The thesis supplies goals, requirements, context, decision explanations and historical screenshots. Technical chapters are checked against current code. The coverage map connects sections and pages. The PDF SHA-256 is recorded in source-manifest.json; the original document is not redistributed within the site.
Inspected public metadata¶
| Evidence | Observed result | Boundary |
|---|---|---|
| Group/project API | Cloud Delivery Lab; six public projects | Does not include private variables or cloud IAM |
| Branches | Default, protected main in all six projects |
Does not expose all push/approval permissions |
| Group issues | 12; 9 closed and 3 infrastructure issues open | Planning status, not a technical result |
| Milestones embedded in issues | Four milestones; infrastructure still active | Direct milestone endpoint required authentication |
Backend pipeline 2604545913 |
Success, 11 successful jobs, snapshot SHA | Does not prove current health or absence of vulnerabilities |
Frontend pipeline 2604607441 |
Success, 11 successful jobs, snapshot SHA | Same boundary |
Infrastructure pipeline 2604650152 |
Historical teardown with successful jobs | Earlier SHA 8e5dedf…; not execution of the reviewed HEAD |
Complete scanner reports, remote IaC state, private variables, billing and current cluster health are outside the reviewed evidence. Pipeline lists were sampled from the latest publicly visible runs, without claiming an audit of the entire history.
Official implementation references¶
| Topic | Reference |
|---|---|
| CI and dependencies | CI syntax and needs |
| Variables | CI/CD variables |
| Builds | Docker in CI |
| Analysis | Code Quality and Container Scanning |
| Agents | GitLab Agent CI workflow |
| State and plans | Managed state and MR summary |
| State mutation | OpenTofu state rm |
| Kubernetes | Deployments |
| Site | MkDocs, Material and GitLab Pages |
What this delivery validates¶
The documentation repository checks ES/EN parity, navigation and internal links/assets, alongside strict MkDocs compilation. These checks validate the site. The delivery does not constitute a fresh application pipeline run or cloud provisioning execution.
To maintain it, pin new SHAs, review configuration differences, update both translations and their requirements map, run the build and retain documentation pipeline evidence. A link to main does not replace the version inventory.