DevOps & Platform Documentation

The single source of truth for the Microtec platform — architecture, infrastructure, CI/CD, DevSecOps, networking, auth, and the operational runbooks that keep it all running. Imported from the DevopsDocs repository.

Start here based on your role

• New to the platform? → Onboarding, then the Overview.
• Backend dev? → Clean Architecture → Backend Services.
• DevOps / SRE? → Infrastructure → CI/CD Pipelines → Environments.
• Debugging an incident? → Runbooks → Incident Response.

Platform at a Glance

Dimension	Value
Backend microservices	13 (.NET 8, Azure Container Apps)
Frontend apps	13 (Angular 17/20, Nx, Module Federation)
Mobile apps	3 (Flutter: BO, ERP, Van Sales)
Azure environments	5 (dev · stage · preprod · uat · production)
Shared NuGet packages	16 (private Azure DevOps feed)
CI/CD orchestrators	6
Keycloak realms / custom SPIs	2 / 7
DevSecOps pipeline stages	16

Platform

• Overview — Platform description, personas, glossary, tech stack, system landscape.
• Architecture — Clean Architecture, CQRS, multi-tenancy, event-driven design, micro-frontend.
• Backend Services — All 13 microservices, coding conventions, CQRS patterns, API design.
• Frontend — Angular MFE roster, Module Federation, auth, state management, builds.
• Mobile — BO app, ERP app, Van Sales, Flutter workspace setup, releases.

Infrastructure & Delivery

• Infrastructure — Azure resources, Bicep modules, Container Apps, naming conventions, ACR.
• CI/CD Pipelines — Pipeline orchestrators, stage templates, branch-env mapping, scripts.
• DevSecOps — SonarCloud, Gitleaks, Trivy, OWASP ZAP, SBOM, AI code review.
• Environments — Dev, stage, preprod, UAT, production — config, URLs, promotion.
• Networking — VNet CIDRs, NSG rules, private endpoints, private DNS, Front Door routing.
• Observability — Seq, OpenTelemetry, Application Insights, health checks, alerting.

Auth & Services

• Keycloak & Auth — Custom SPIs, realm configuration, flow priorities, session limiting.
• Authentication — Dual-token design, JWT claims, RBAC, Keycloak realms.
• API Reference — Gateway routes, endpoint naming, request/response envelope, rate limiting.
• Shared Packages — NuGet catalog, dependency hierarchy, setup, migration, ZATCA.

Reference

• Data & Databases — SQL Server per-tenant, MongoDB, Redis, EF Core patterns, backup.
• Fooj Project — Fooj architecture, infrastructure, environments, CI/CD, shared egress.
• Architecture Decisions (ADR) — ADR-001 through ADR-009 — key technology choices and rationale.
• Runbooks — Step-by-step procedures for deployments, incidents, key rotation.
• Onboarding — New-developer checklist, access matrix, local dev setup per role.
• Technology Catalog — Full inventory of every tool and library with version and purpose.
• Diagrams — Service topology, network topology, CI/CD flow, auth flow, data flow.

Environment Quick Reference

Environment	VNet CIDR	Domain	Key Vault
dev	10.0.0.0/16	microtec-test.com	mic-erp-be-dev-skv
stage	10.1.0.0/16	microtecstage.com	mic-erp-stg-kv
preprod	10.6.0.0/16	(preprod domain)	mic-erp-be-preprod-skv
uat	10.5.0.0/16	microtec-uat.com	mic-erp-uat-kv
production	10.2.0.0/16	onlinemicrotec.com.sa	(prod kv)

Critical gotchas

• MonogoDb typo is INTENTIONAL — the NuGet package reads MonogoDb__ConnectionString (not MongoDB). Do not "fix" it — it is a breaking change.
• DataProtection keys are machine-specific — encrypted connection strings cannot be decrypted on a different server.
• NuGet feed auth — backend builds use $(System.AccessToken) for the Azure DevOps feed; no manual PAT needed.