This paper aims to share with the community the road to an “as close as possible” CI/CD integration with air gapped on the way to the production. We will share some technical feedback, as well as the impact on the team (skillset) and the return on investment. During this CI/CD journey, we have strongly pushed all security aspect into the process from OS and component hardening to ACL computation for the whole infrastructure accordingly to the component deployed.