Infrastructure¶
This section covers the core infrastructure components that power the cluster.
Component Overview¶
graph LR
subgraph OS["Operating System"]
Talos[Talos Linux 1.12.4]
end
subgraph Network["Networking"]
Cilium[Cilium 1.19.0]
Envoy[Envoy Gateway v1.6.3]
CF[Cloudflare Tunnel]
end
subgraph Data["Data"]
PG[PostgreSQL 17.7]
DF[Dragonfly]
OEBS[OpenEBS]
end
subgraph GitOps
Flux[Flux CD 2.7.5]
end
subgraph Security
SOPS[SOPS + Age]
Kanidm[Kanidm SSO]
CM[cert-manager]
end
Talos --> Cilium
Cilium --> Envoy
Flux --> Network
Flux --> Data
Flux --> Security
Pages¶
| Page | Description |
|---|---|
| Talos Linux | Immutable Kubernetes OS configuration and management |
| Flux CD | GitOps continuous delivery |
| Cilium | eBPF-based container networking |
| Envoy Gateway | HTTP routing and ingress |
| Storage | OpenEBS, NFS, and backup systems |
| Databases | PostgreSQL HA cluster and Dragonfly |
| Certificates & DNS | TLS automation and DNS management |
| Secrets | SOPS, Age, and External Secrets |
| Identity & SSO | Kanidm identity provider |