threadforge-fabric

Minimal Identity-Ready Kubernetes Substrate

What This Repository Provides

• Internal hardened container registry
• SPIRE-based identity plane (PSAT)
• Minimal RBAC and admission enforcement
• Durable PostgreSQL instance
• Prometheus metrics stack
• Kustomize-based deterministic deployment

Architectural Boundary

This repository does NOT include:

• Application runtime
• AI services
• Vector databases
• Analytics stacks
• Observability UIs (Grafana, Loki, Tempo)
• Cluster provisioning logic
• Helm charts
• Development tooling

Assumptions

• Kubernetes 1.26+
• ValidatingAdmissionPolicy enabled
• Container runtime present
• Cluster-admin permissions for install
• Internal registry usage only

Installation

make install
make validate

Intended Use

This repository provides a minimal identity-ready infrastructure substrate for Kubernetes environments. It is designed as a consulting-grade reference baseline or as a composable foundation for higher-level services.