I think that is a very valid approach. We use https://buildkite.com/ https://buildkite.com/ for ci and they have exactly that model, where they manage the admin

I think that is a very valid approach. We use https://buildkite.com/ https://buildkite.com/ for ci and they have exactly that model, where they manage the admin panel and meta data db, but worker nodes can be deployed elsewhere