Values Layering: Lowest First, Later Wins

Values Layering: Lowest First, Later Wins A data-flow diagram generated by Archify. 01 / Platform 02 / Service 03 / Product 04 / Environment 05 / Cluster platform-services · values.yaml defaults · 01 / Platform · platform platform-services values.yaml defaults platform service-chart.yaml · appSettings · env · secrets · 02 / Service · service team service-chart.yaml appSettings · env · secrets service team tfa-app chart · baked layers 1-3 · 03 / Product · product chart tfa-app chart baked layers 1-3 product chart configurations/ · prefixes · secret pool · 03 / Product · product ops configurations/ prefixes · secret pool product ops 10-landscape · environments.yaml · 04 / Environment · platform ops 10-landscape environments.yaml platform ops 20-overrides · <env>/tfa/helm.yaml · 04 / Environment · optional 20-overrides <env>/tfa/helm.yaml optional 30-identity · computed, fixed · 04 / Environment · orchestrator 30-identity computed, fixed orchestrator HelmRelease tfa · final merged values · 05 / Cluster · later wins HelmRelease tfa final merged values later wins Key Vault · kv-app01-prod · 04 / Environment · secret values Key Vault kv-app01-prod secret values ExternalSecret · one per service · 05 / Cluster · ESO ExternalSecret one per service ESO dependency exact pin baked in overlaid by overlaid by overlaid by valuesFrom names secrets sync Legend primary data policy / PII async batch data store data flow