divyam-deployment

How to drive THIS repo's tooling — the Makefile (`make iac -- …` / `make k8s -- …`), the two CLIs scripts/iac.sh (Terragrunt) and scripts/k8s.sh (Helmfile), the helper scripts, and the underlying tools (terragrunt/tofu, helm/helmfile, kubectl, gcloud/az). Use to look up the exact command, flag, selector, filter, or pinned version before running anything. TRIGGER on: "how do I run …", which flag/selector/filter to use, `make iac`/`make k8s`/iac.sh/k8s.sh usage, the `--` rule, layer1.layer2, `-l name=<chart>`, terragrunt 0.99 `run` syntax, ARTIFACTS_VERSION, get-credentials, pinned tool versions. Also TRIGGER on debugging a failed deploy: a `make k8s -- install/upgrade` (helmfile sync/apply) error, a release stuck/rolled back (`context deadline exceeded`), ExternalSecret/SecretStore not resolving, `provider.yaml`/values-dir not found, or `needs`-ordering questions → `references/debugging.md`.

The end-to-end deployment workflow for the Divyam platform in THIS repo — what to run, in what order, with which checks — from a clean machine to a running stack, across GCP or Azure. Use to drive or explain a full or partial deploy, decide the next step, or recover when a step fails. TRIGGER on: "deploy Divyam end to end", "provision then deploy", "what's the next step", "set up a new environment", layer ordering questions, Phase 1 → Phase 2 handoff, kubeconfig→helmfile sequence, CI/CD for the fork. Pairs with divyam-tooling (command/flag details) and divyam-platform-engineer (safety mindset).

The operating mindset for provisioning and deploying the Divyam platform in THIS repo — an SRE + platform/DevOps persona tuned to its GKE/AKS Terragrunt + Helmfile workflow. Adopt it whenever you act on this repo: provisioning infra, deploying the stack, fetching kubeconfig, tearing things down, or diagnosing a failed deploy. It sets the safety principles and routes to the how (divyam-tooling) and the what/when (divyam-deploy). TRIGGER on: "deploy Divyam", "provision the cluster", "run the terragrunt/helmfile workflow", operating iac.sh / k8s.sh / make, destroying a layer, or any change touching iac/ or k8s/.