# Downstream services

> External APIs and services called by the devops-lib pipeline stages. Infrastructure (storage, registries) lives in [infrastructure.md](infrastructure.md).

## ArgoCD

Used by `deployArgoCD.groovy` to sync Helm releases to GKE clusters.

| Environment | URL | Credentials |
|-------------|-----|-------------|
| `prd` | `argocd-{bu}-prd.meeshogcp.in` | `argocd-{bu}-prd-creds` |
| `int` | `argocd-shared-int.meeshogcp.in` | `argocd-shared-int-creds` |
| `stg` / `ftr` | `argocd-dev.meeshogcp.in` | `argocd-dev-creds` |

Calls: `argocd app sync <app-name>` via CLI authenticated against the above URLs.

## Ringmaster

Used by `deployRingmaster.groovy` and `notify.groovy` for deployment tracking and the CD approval portal.

| Environment | API base URL |
|-------------|-------------|
| `prd` / `int` | `https://ringmaster-api.meeshogcp.in` |
| `stg` / `ftr` | `https://ringmaster-api.admin.meeshogcp.in` |

Endpoints called:
- `POST /api/v1/key/cicd/cd/update?workingEnv={env}` — build result + image tag + applications deployed
- `POST /api/v1/key/update/deployment-history?workingEnv={env}` — deployment history (prd branch builds only)

Credentials: Jenkins credential `ringmaster-token` (username + password).

## Turbo-Turtle (new CICD callback)

Used by `deployRingmaster.groovy` for builds triggered by users other than `ringmaster-bot`.

| Environment | Base URL |
|-------------|---------|
| `prd` / `int` | `http://turbo-turtle.meeshogcp.in` |
| `stg` / `ftr` | `http://turbo-turtle.admin.meeshogcp.in` |

Endpoint called: `POST /api/v1/ci/jenkins/callback`

## Deployment Tracker (legacy)

Used by `notify.groovy` for prd branch builds.

| Cloud | URL |
|-------|-----|
| GCP | `http://deployment-tracker.prd.meesho.int` |
| AWS | `http://deployment-tracker.meeshoint.in` |

Endpoint called: `POST /api/1.0/deployment-tracker/jenkins/create`

## SonarQube

Used by all build stages for code quality gating.

| Environment | URL | Token credential |
|-------------|-----|-----------------|
| `prd` / `int` | `https://sonarqube-prd.meeshogcp.in` | `sonar-token-prod` |
| `stg` / `ftr` | `https://sonarqube-{bu}-dev.meeshogcp.in` | `sonar-token-{bu}-dev` |

## Vault

Used by build stages to retrieve service secrets at deploy time.

| Environment | URL | Token credential |
|-------------|-----|-----------------|
| `prd` / `int` | `https://vault-prd.meeshogcp.in` | `vault-prd-token` |
| `stg` / `ftr` | `https://vault-dev.meeshogcp.in` | `vault-dev-token` |

## JFrog Artifactory

Used by `buildMaven.groovy` and `onlyPushtoJfrog.groovy` for Maven JAR publishing and resolution.

Credential: `svc-devops-meesho` (env `GITHUB_CRED`).

## GitHub — Meesho/whitelists

Cloned at runtime by `constructParam.groovy` to fetch per-repo policy YAML files.

```
url:           https://github.com/Meesho/whitelists.git
branch:        main
credentialsId: cicd-github-app
```

Files read:
- `skip-sonar-whitelist.yaml`
- `app-config-disabled.yaml`
- `multizone-enabled-repos.yaml`
- `allowedNonDevelopPrDeploymentToInt.yaml`
- `ValidateCacConfig.yaml`

## GitHub — devops-helm-charts / devops-argo-config

Cloned by `deployArgoCD.groovy` to update Helm values and ArgoCD app manifests.

| Repo | Branch (prd) | Branch (stg) |
|------|-------------|-------------|
| `devops-helm-charts` | `main` | `develop` |
| `devops-argo-config` | `main` | `develop` |

Credential: `svc-devops-meesho`.

## Athens (Go module proxy)

Used by `buildGo.groovy` via `GOPRIVATE=github.com/Meesho` + `GOPROXY`.

| Environment | URL |
|-------------|-----|
| `prd` / `int` | `https://athens-prd.meeshogcp.in` |
| `stg` / `ftr` | `https://athens-dev.meeshogcp.in` |

<!-- meesho-init: generated-at=2026-05-07T08:39:42Z base-sha=805350dfbd5b354663e8e2a90bfc219c4c267e00 -->