Home-Ops: Enterprise-Grade Infrastructure & Security Platform

A comprehensive Kubernetes-based home lab infrastructure implementing enterprise-grade observability, data analytics, chaos engineering, incident response, and comprehensive security controls.

Core components

Icon	Name	Description
	Cilium	Provides network routing, network security, exposing apps via LoadBalancers and other networking functionality.
	Multus	Provides secondary network connectivity aside from Cilium, such as connecting pods and KubeVirt VMs to specific VLANs' L2 domains directly.
	Rook-Ceph	Provides and manages highly available networked persistent storage within the Kubernetes cluster itself.
	VolSync	Provides and manages automated backups and restores of persistent storage.
	democratic-csi	Wildcard storage CSI driver supporting multiple backends like local-hostpath.
	Flux	Provides GitOps automation for syncing desired state of resources.
	external-secrets	Syncs secrets from external sources like 1Password as Kubernetes secrets, with a templating engine.
	k8s-gateway	Internal DNS resolver for exposing apps via Ingress, Gateway API and LoadBalancer Services.
	external-dns	Syncs DNS records against upstream resolvers' records, such as Cloudflare DNS.
	cert-manager	Automated TLS management for generating and rotating signed and trusted TLS certificates stored as Kubernetes secrets.
	Ingress-NGINX	Kubernetes Ingress controller for automated configuration of NGINX to reverse proxy HTTP/S apps with automated TLS from cert-manager.
	cloudflared	Expose specific apps publicly via Cloudflare Zero Trust tunnel.
	Crunchy Postgres Operator	Automated HA Postgres cluster and backups management.
	VictoriaMetrics	Pull-based monitoring platform.
	kube-prometheus-stack	Automated configuration and service discovery for Prometheus (and thus VictoriaMetrics), with shipped defaults for Kubernetes-focused monitoring and alerting.
	Kyverno	Kubernetes API webhook policy engine, for validating, mutating and generating resources. Also abused as The Jank Engine.
	Spegel	Transparent container registry cache mirror within cluster.
	system-upgrade-controller	Auto-update of cluster components' versions such as Talos OS and Kubernetes versions. Combined with GitOps + Renovate for a PR-based auto-updating workflow.

Core Components Architecture

graph TB
    subgraph "External World"
        Internet[Internet]
        Cloudflare[Cloudflare DNS]
        OnePassword[1Password]
        GitRepo[Git Repository]
    end

    subgraph "Edge & Ingress Layer"
        CloudflaredTunnel[Cloudflared<br/>Zero Trust Tunnel]
        IngressNGINX[Ingress-NGINX<br/>Reverse Proxy + TLS]
        K8sGateway[k8s-gateway<br/>Internal DNS Resolver]
        ExternalDNS[external-dns<br/>DNS Record Sync]
    end

    subgraph "Network Infrastructure"
        Cilium[Cilium<br/>CNI + Security + LoadBalancers]
        Multus[Multus<br/>Multi-Network + VLANs]
    end

    subgraph "Security & Policy Layer"
        CertManager[cert-manager<br/>Automated TLS Management]
        ExternalSecrets[external-secrets<br/>Secret Sync + Templating]
        Kyverno[Kyverno<br/>Policy Engine + Validation]
    end

    subgraph "GitOps & Automation"
        Flux[Flux<br/>GitOps Automation]
        SystemUpgrade[system-upgrade-controller<br/>Auto-updates + Renovate]
    end

    subgraph "Storage Infrastructure"
        RookCeph[Rook-Ceph<br/>HA Networked Storage]
        VolSync[VolSync<br/>Automated Backups/Restores]
        DemocraticCSI[democratic-csi<br/>Wildcard Storage Driver]
    end

    subgraph "Data Layer"
        CrunchyPostgres[Crunchy Postgres Operator<br/>HA Database Clusters]
    end

    subgraph "Observability Stack"
        VictoriaMetrics[VictoriaMetrics<br/>Pull-based Monitoring]
        PrometheusStack[kube-prometheus-stack<br/>+ prometheus-operator<br/>Config + Service Discovery]
    end

    subgraph "Container Registry"
        Spegel[Spegel<br/>Registry Cache Mirror]
    end

    subgraph "Applications & Workloads"
        Apps[Applications<br/>Services & Workloads]
    end

    %% External Connections
    Internet -->|Public Access| CloudflaredTunnel
    Cloudflare -->|DNS Management| ExternalDNS
    OnePassword -->|Secret Source| ExternalSecrets
    GitRepo -->|Configuration| Flux

    %% Edge Layer
    CloudflaredTunnel -->|Secure Tunnel| IngressNGINX
    IngressNGINX -->|Internal Resolution| K8sGateway
    ExternalDNS -->|DNS Records| Cloudflare

    %% Network Layer
    IngressNGINX -->|Traffic Routing| Cilium
    K8sGateway -->|Network Services| Cilium
    Cilium -->|Secondary Networks| Multus

    %% Security Integration
    CertManager -->|TLS Certificates| IngressNGINX
    ExternalSecrets -->|Kubernetes Secrets| Apps
    Kyverno -->|Policy Enforcement| Apps

    %% GitOps Flow
    Flux -->|Deploy & Sync| Apps
    Flux -->|Manage| CertManager
    Flux -->|Manage| ExternalSecrets
    SystemUpgrade -->|Version Updates| Flux

    %% Storage Connections
    RookCeph -->|Persistent Storage| Apps
    RookCeph -->|Database Storage| CrunchyPostgres
    VolSync -->|Backup Management| RookCeph
    DemocraticCSI -->|Storage Backend| Apps

    %% Data Layer
    CrunchyPostgres -->|Database Services| Apps

    %% Monitoring Flow
    Apps -->|Metrics| VictoriaMetrics
    PrometheusStack -->|Configuration| VictoriaMetrics
    PrometheusStack -->|Service Discovery| Apps

    %% Registry
    Spegel -->|Container Images| Apps

    %% Network Services
    Cilium -->|Load Balancing| Apps
    Cilium -->|Network Security| Apps

Observability architecture overview

graph TB
    subgraph "Users/DevOps"
        Users
    end

    subgraph "Kubernetes Cluster"
        subgraph "Applications"
            Apps
        end

        subgraph "Observability Stack"
            Prometheus
            KubeStateMetrics
            OtelCollector
            Alloy

            subgraph "Storage Layer"
                Loki
                Tempo
                Mimir
            end

            Grafana
        end

        subgraph "Dashboards"
            K8sDashboards
        end
    end

    subgraph "Cloud Storage"
        LogsStorage
        TracesStorage
        MetricsStorage
    end

    %% Data Flow
    Apps -->|"Get custom metrics"| Prometheus
    Prometheus -->|"Get Cluster/Pods<br/>Metrics"| KubeStateMetrics
    Apps -->|"Traces/Logs/Metrics"| OtelCollector
    Apps -->|"Container Logs"| Alloy

    OtelCollector -->|"Push logging data"| Loki
    OtelCollector -->|"Push metrics data"| Mimir
    OtelCollector -->|"Push traces data"| Tempo
    Alloy -->|"Push logging data"| Loki
    Prometheus -->|"Metrics"| Mimir
    KubeStateMetrics -->|"Metrics"| Mimir

    Loki --> LogsStorage
    Tempo --> TracesStorage
    Mimir --> MetricsStorage

    Grafana --> K8sDashboards
    Users --> Grafana

    subgraph "Cloud Storage"
        LogsStorage
        TracesStorage
        MetricsStorage
    end

    %% Data source connections
    MetricsStorage --> Grafana
    TracesStorage --> Grafana
    LogsStorage --> Grafana

Storage architecture overview

graph TD
    subgraph "Storage Layer"
        NFS[CSI-NFS] -->|File Storage| Apps1[General Apps]
        LH[Longhorn] -->|Block Storage| DB[Databases]
        LH -->|Block Storage| MQ[Message Queues]
        MIO[MinIO] -->|Object Storage| DS[Data Science]
        MIO -->|Object Storage| MON[Monitoring]
    end

    subgraph "Backup & DR"
        LH -->|Snapshots| VEL[Velero]
        MIO -->|Backup Target| VEL
        VS[VolSync] -->|Replication| LH
    end

    subgraph "Monitoring Stack"
        PM[Prometheus]
        GF[Grafana]
        LH -->|Metrics| PM
        MIO -->|Metrics| PM
        PM -->|Visualization| GF
    end

    subgraph "Existing Apps"
        DB -->|Storage| PG[PostgreSQL]
        DB -->|Storage| IF[InfluxDB]
        MQ -->|Storage| VMQ[VerneMQ]
        DS -->|Data| SUP[Superset]
    end

Storage Components Overview

graph TB
    subgraph "Production Storage Infrastructure"
        subgraph "Block Storage Layer"
            subgraph "Rook-Ceph Cluster"
                CEPH_OSD1["<br/>Ceph OSD-1<br/>Node 1"]
                CEPH_OSD2["<br/>Ceph OSD-2<br/>Node 2"]
                CEPH_OSD3["<br/>Ceph OSD-3<br/>Node 3"]
                CEPH_MON["<br/>Ceph Monitors<br/>3 replicas"]
                CEPH_MGR["<br/>Ceph Manager<br/>2 replicas"]
                CEPH_MDS["<br/>Ceph MDS<br/>CephFS"]
                CEPH_RGW["<br/>Ceph RGW<br/>Object Gateway"]
            end

            subgraph "Storage Classes"
                SC_BLOCK["<br/>ceph-block<br/>(Default RBD)"]
                SC_FS["<br/>ceph-filesystem<br/>(CephFS)"]
                SC_BUCKET["<br/>ceph-bucket<br/>(Object Storage)"]
            end
        end

        subgraph "NFS & External Storage"
            subgraph "Democratic CSI"
                TRUENAS["<br/>TrueNAS<br/>192.168.8.161"]
                SC_NFS["<br/>truenas-nfs<br/>(NFS Storage)"]
            end

            subgraph "OpenEBS"
                OPENEBS_LOCAL["<br/>OpenEBS LocalPV<br/>(Local Storage)"]
                OPENEBS_HOSTPATH["<br/>OpenEBS Hostpath<br/>(Node Storage)"]
            end
        end

        subgraph "Database Storage Layer"
            subgraph "CloudNative PostgreSQL"
                PG_PRIMARY["<br/>PostgreSQL Primary<br/>5 instances"]
                PG_REPLICA1["<br/>PostgreSQL Replica-1<br/>Sync Replica"]
                PG_REPLICA2["<br/>PostgreSQL Replica-2<br/>Sync Replica"]
                PG_WAL["<br/>WAL Storage<br/>100Gi dedicated"]
                PG_BACKUP["<br/>Backup Storage<br/>S3 Compatible"]
            end

            subgraph "Redis & Cache"
                REDIS_CLUSTER["<br/>Redis Cluster<br/>High Availability"]
                DRAGONFLY["<br/>Dragonfly<br/>Redis-compatible"]
            end

            subgraph "Other Databases"
                MARIADB["<br/>MariaDB<br/>SQL Database"]
                INFLUXDB["<br/>InfluxDB<br/>Time Series"]
            end
        end

        subgraph "Backup & Recovery Layer"
            subgraph "Velero Backup"
                VELERO["<br/>Velero<br/>Cluster Backup"]
                VELERO_STORAGE["<br/>Cloud Storage<br/>Backup Repository"]
            end

            subgraph "VolSync"
                VOLSYNC["<br/>VolSync<br/>PV Replication"]
                VOLSYNC_DEST["<br/>Destination<br/>Remote Storage"]
            end

            subgraph "Database Backups"
                PG_BARMAN["<br/>Barman<br/>PostgreSQL Backup"]
                BACKUP_S3["<br/>S3 Storage<br/>192.168.8.161:9000"]
            end
        end

        subgraph "Snapshot Management"
            SNAPSHOT_CTRL["<br/>Snapshot Controller<br/>CSI Snapshots"]
            SNAPSHOT_CRD["<br/>VolumeSnapshot<br/>CRDs"]
        end

        subgraph "Storage Monitoring"
            subgraph "Performance Monitoring"
                PROMETHEUS_STORAGE["<br/>Storage Metrics<br/>Prometheus"]
                GRAFANA_STORAGE["<br/>Storage Dashboards<br/>Grafana"]
                SMART_EXPORTER["<br/>SMART Exporter<br/>Disk Health"]
            end

            subgraph "Alerting"
                STORAGE_ALERTS["<br/>Storage Alerts<br/>Disk Usage/Health"]
                CEPH_ALERTS["Cluster Health"]
            end
        end

        subgraph "Applications & Workloads"
            OBSERVABILITY["LGTM Stack"]
            DATA_SCIENCE["ClickHouse/Jupyter"]
            SERVICES["Web Applications"]
            SECURITY["Auth/Secrets"]
        end
    end

    %% Storage Connections
    CEPH_OSD1 --> CEPH_MON
    CEPH_OSD2 --> CEPH_MON
    CEPH_OSD3 --> CEPH_MON
    CEPH_MON --> CEPH_MGR
    CEPH_MGR --> SC_BLOCK
    CEPH_MGR --> SC_FS
    CEPH_MGR --> SC_BUCKET
    CEPH_MDS --> SC_FS
    CEPH_RGW --> SC_BUCKET

    TRUENAS --> SC_NFS
    OPENEBS_LOCAL --> OPENEBS_HOSTPATH

    %% Database Storage
    SC_BLOCK --> PG_PRIMARY
    SC_BLOCK --> PG_WAL
    PG_PRIMARY --> PG_REPLICA1
    PG_PRIMARY --> PG_REPLICA2
    PG_PRIMARY --> PG_BACKUP

    SC_BLOCK --> REDIS_CLUSTER
    SC_BLOCK --> DRAGONFLY
    SC_BLOCK --> MARIADB
    SC_BLOCK --> INFLUXDB

    %% Backup Connections
    VELERO --> VELERO_STORAGE
    VOLSYNC --> VOLSYNC_DEST
    PG_BARMAN --> BACKUP_S3

    %% Snapshot Management
    SC_BLOCK --> SNAPSHOT_CTRL
    SC_FS --> SNAPSHOT_CTRL
    SNAPSHOT_CTRL --> SNAPSHOT_CRD

    %% Monitoring
    CEPH_MGR --> PROMETHEUS_STORAGE
    PG_PRIMARY --> PROMETHEUS_STORAGE
    SMART_EXPORTER --> PROMETHEUS_STORAGE
    PROMETHEUS_STORAGE --> GRAFANA_STORAGE
    PROMETHEUS_STORAGE --> STORAGE_ALERTS
    PROMETHEUS_STORAGE --> CEPH_ALERTS

    %% Application Storage Usage
    SC_BLOCK --> OBSERVABILITY
    SC_FS --> DATA_SCIENCE
    SC_NFS --> SERVICES
    SC_BUCKET --> SECURITY

    %% Performance Optimization
    PG_WAL -.->|"Dedicated WAL"| PG_PRIMARY
    BACKUP_S3 -.->|"Point-in-time Recovery"| PG_PRIMARY
    VOLSYNC_DEST -.->|"Cross-site Replication"| VOLSYNC

Data platform architecture overview

graph TD
    subgraph DataSources [External Data Sources]
        A[APIs & Webhooks]
        B[File Uploads]
        C[Application Logs]
        D[Metrics & Events]
    end

    subgraph Ingestion [Data Ingestion Layer]
        E[Vector Log Aggregator 192.168.8.113]
        F[Alloy Telemetry Collector]
        G[Kafka Streaming Platform]
        H[Schema Registry]
    end

    subgraph Analytics [Analytics Databases]
        I[ClickHouse OLAP Cluster]
        J[Druid Real-time Analytics]
        K[InfluxDB Time Series]
    end

    subgraph OLTP [OLTP Databases]
        L[PostgreSQL Primary 192.168.8.101]
        M[PostgreSQL Read Replicas]
        N[MariaDB Cluster]
        O[Redis HA Cluster]
        P[Dragonfly Redis-Compatible]
    end

    subgraph Storage [Object Storage]
        Q[TrueNAS Enterprise 192.168.8.161]
        R[MinIO S3-Compatible]
        S[Ceph Distributed Storage]
    end

    subgraph Processing [Data Processing]
        T[Apache Spark Cluster]
        U[Airflow Workflows]
        V[JupyterHub Data Science]
        W[DBT Transformations]
    end

    subgraph Visualization [Analytics & Visualization]
        X[Apache Superset Production 3 Replicas]
        Y[Grafana Analytics Dashboards]
        Z[Jupyter Notebooks]
        AA[Custom Analytics Apps]
    end

    subgraph MLPlatform [ML Platform]
        BB[MLflow Model Registry]
        CC[Kubeflow Pipelines]
        DD[TensorFlow Serving]
        EE[Model APIs]
    end

    subgraph DataGov [Data Governance]
        FF[Data Catalog]
        GG[Data Lineage Tracking]
        HH[Data Quality Monitoring]
        II[Compliance Controls]
    end

    subgraph Backup [Backup & Recovery]
        JJ[Velero Cluster Backup]
        KK[PostgreSQL Continuous Backup]
        LL[ClickHouse Backup Service]
        MM[Cross-Region S3 Backup]
    end

    %% Data Flow Connections
    A --> E
    B --> G
    C --> F
    D --> E

    E --> I
    E --> J
    F --> E
    G --> J
    H --> G

    E --> L
    F --> K
    G --> I

    L --> M
    O --> P

    I --> Q
    J --> R
    L --> S

    I --> T
    J --> T
    L --> W
    T --> U
    U --> V

    X --> I
    X --> J
    X --> L
    X --> O
    X --> N
    X --> P
    Y --> I
    Z --> I
    Z --> J
    AA --> J

    T --> BB
    BB --> CC
    CC --> DD
    DD --> EE

    I --> FF
    J --> FF
    FF --> GG
    GG --> HH
    HH --> II

    L --> KK
    I --> LL
    Q --> MM
    JJ --> MM

Data Platform Service Interconnections

graph TD
    subgraph DataIngestion [Production Data Ingestion Pipeline]
        VectorAggregator[Vector Log Aggregator 192.168.8.113]
        AlloyCollector[Alloy Telemetry Collector]
        KafkaCluster[Kafka Streaming Cluster]
        SchemaRegistry[Confluent Schema Registry]
        KafkaConnect[Kafka Connect Connectors]
    end

    subgraph AnalyticsEngines [Analytics & OLAP Engines]
        ClickHouseCluster[ClickHouse Production Cluster]
        DruidCluster[Apache Druid Analytics Platform]
        InfluxDBCluster[InfluxDB Time Series Database]
    end

    subgraph TransactionalDBs [Transactional Databases - OLTP]
        PostgresPrimary[CloudNative PostgreSQL Primary]
        PostgresReplicas[PostgreSQL Read Replicas HA]
        MariaDBCluster[MariaDB Galera Cluster]
        RedisCluster[Redis Sentinel HA Cluster]
        DragonflyDB[Dragonfly Redis-Compatible Cache]
    end

    subgraph ObjectStorage [Enterprise Object Storage]
        TrueNASEnterprise[TrueNAS Enterprise Storage 192.168.8.161]
        MinIODistributed[MinIO Distributed S3 Storage]
        CephCluster[Ceph Distributed Storage Cluster]
        CephObjectGateway[Ceph RADOS Gateway]
    end

    subgraph DataProcessing [Big Data Processing Platform]
        ApacheSparkCluster[Apache Spark Distributed Processing]
        AirflowOrchestration[Apache Airflow Workflow Orchestration]
        JupyterHubPlatform[JupyterHub Multi-User Data Science]
        DBTTransformations[DBT Data Transformations]
        FlinkStreamProcessing[Apache Flink Stream Processing]
    end

    subgraph MLOpsStack [MLOps & Model Serving]
        MLflowRegistry[MLflow Model Registry & Tracking]
        KubeflowPipelines[Kubeflow ML Pipelines]
        TensorFlowServing[TensorFlow Model Serving]
        ModelAPIs[REST/gRPC Model APIs]
        FeatureStore[Feature Store]
    end

    subgraph AnalyticsPlatform [Analytics & Visualization Platform]
        SupersetProduction[Apache Superset Production 3 Replicas]
        GrafanaAnalytics[Grafana Analytics Dashboards]
        JupyterNotebooks[Jupyter Notebook Analytics]
        CustomDashboards[Custom Analytics Applications]
        ReportingEngine[Automated Reporting Engine]
    end

    subgraph DataGovernance [Enterprise Data Governance]
        ApacheAtlas[Apache Atlas Data Catalog]
        DataLineage[Data Lineage & Impact Analysis]
        DataQuality[Great Expectations Data Quality]
        SchemaEvolution[Schema Evolution Management]
        ComplianceAuditing[GDPR/SOX Compliance Auditing]
    end

    subgraph MonitoringObservability [Data Platform Monitoring]
        PrometheusDataMetrics[Prometheus Data Platform Metrics]
        LokiDataLogs[Loki Data Platform Logs]
        JaegerDataTracing[Jaeger Data Pipeline Tracing]
        AlertManagerData[AlertManager Data Platform Alerts]
        GrafanaMonitoring[Grafana Monitoring Dashboards]
    end

    subgraph BackupRecovery [Backup & Disaster Recovery]
        VeleroClusterBackup[Velero Full Cluster Backup]
        PostgresWALBackup[PostgreSQL WAL-E Continuous Backup]
        ClickHouseBackupService[ClickHouse Backup Service]
        DruidDeepStorageBackup[Druid Deep Storage Backup]
        CrossRegionReplication[Cross-Region Data Replication]
    end

    %% Primary Data Flow
    VectorAggregator -->|Structured Logs| ClickHouseCluster
    VectorAggregator -->|Log Streams| DruidCluster
    AlloyCollector -->|Telemetry Data| VectorAggregator
    KafkaCluster -->|Real-time Events| DruidCluster
    SchemaRegistry -->|Schema Validation| KafkaCluster
    KafkaConnect -->|Change Data Capture| KafkaCluster

    %% Analytics Database Connections
    ClickHouseCluster -->|Aggregated Data| TrueNASEnterprise
    DruidCluster -->|Deep Storage| MinIODistributed
    InfluxDBCluster -->|Time Series Storage| CephCluster

    %% OLTP Database Replication
    PostgresPrimary -->|Streaming Replication| PostgresReplicas
    PostgresPrimary -->|Change Streams| KafkaCluster
    RedisCluster -->|Session Data| DragonflyDB
    MariaDBCluster -->|Row-based Replication| PostgresReplicas

    %% Object Storage Integration
    CephCluster -->|Object API| CephObjectGateway
    CephObjectGateway -->|S3 Compatible| MinIODistributed
    TrueNASEnterprise -->|NFS/SMB| CephCluster

    %% Data Processing Workflows
    ClickHouseCluster -->|Batch Processing| ApacheSparkCluster
    DruidCluster -->|Stream Processing| FlinkStreamProcessing
    ApacheSparkCluster -->|Workflow Orchestration| AirflowOrchestration
    AirflowOrchestration -->|Notebook Execution| JupyterHubPlatform
    PostgresPrimary -->|Data Transformations| DBTTransformations

    %% ML Platform Integration
    ApacheSparkCluster -->|Feature Engineering| MLflowRegistry
    MLflowRegistry -->|Model Training| KubeflowPipelines
    KubeflowPipelines -->|Model Deployment| TensorFlowServing
    TensorFlowServing -->|Model APIs| ModelAPIs
    ClickHouseCluster -->|Feature Store| FeatureStore

    %% Analytics & Visualization
    SupersetProduction -->|OLAP Queries| ClickHouseCluster
    SupersetProduction -->|Real-time Analytics| DruidCluster
    SupersetProduction -->|Metadata Storage| PostgresPrimary
    SupersetProduction -->|Cache Layer| RedisCluster
    GrafanaAnalytics -->|Metrics Visualization| PrometheusDataMetrics
    JupyterNotebooks -->|Data Science| ClickHouseCluster
    CustomDashboards -->|Custom Analytics| DruidCluster
    ReportingEngine -->|Automated Reports| SupersetProduction

    %% Data Governance
    ApacheAtlas -->|Metadata Discovery| ClickHouseCluster
    ApacheAtlas -->|Data Discovery| DruidCluster
    DataLineage -->|Impact Analysis| ApacheAtlas
    DataQuality -->|Quality Metrics| PrometheusDataMetrics
    SchemaEvolution -->|Schema Management| SchemaRegistry
    ComplianceAuditing -->|Audit Trails| LokiDataLogs

    %% Monitoring & Observability
    ClickHouseCluster -->|Query Metrics| PrometheusDataMetrics
    DruidCluster -->|Ingestion Metrics| PrometheusDataMetrics
    PostgresPrimary -->|Database Logs| LokiDataLogs
    SupersetProduction -->|Request Tracing| JaegerDataTracing
    PrometheusDataMetrics -->|Alert Rules| AlertManagerData
    AlertManagerData -->|Visualization| GrafanaMonitoring

    %% Backup & Recovery
    PostgresPrimary -->|Continuous Backup| PostgresWALBackup
    ClickHouseCluster -->|Incremental Backup| ClickHouseBackupService
    DruidCluster -->|Deep Storage Backup| DruidDeepStorageBackup
    TrueNASEnterprise -->|Cross-Region Sync| CrossRegionReplication
    VeleroClusterBackup -->|Disaster Recovery| CrossRegionReplication

Security architecture overview

graph TB
    subgraph "Production Security Infrastructure"
        subgraph "Identity & Access Management"
            subgraph "Authentication Layer"
                AUTHELIA["<br/>Authelia<br/>Multi-Factor Auth"]
                LLDAP["<br/>LLDAP<br/>LDAP Directory"]
                AUTHENTIK["<br/>Authentik<br/>Identity Provider"]
                KEYCLOAK["<br/>Keycloak<br/>SSO Provider"]
            end

            subgraph "Authorization & Proxy"
                OAUTH2_PROXY["<br/>OAuth2-Proxy<br/>Auth Middleware"]
                GLAUTH["<br/>GLAuth<br/>Lightweight LDAP"]
            end
        end

        subgraph "Network Security Layer"
            subgraph "Zero-Trust Network"
                NETWORK_POLICIES["<br/>Network Policies<br/>Micro-segmentation"]
                CILIUM["<br/>Cilium<br/>CNI Security"]
                TAILSCALE["<br/>Tailscale<br/>Mesh VPN"]
            end

            subgraph "DNS Security"
                ADGUARD["<br/>AdGuard<br/>DNS Filtering"]
                BLOCKY["<br/>Blocky<br/>DNS Blocker"]
                PIHOLE["<br/>Pi-hole<br/>Network-wide blocking"]
            end
        end

        subgraph "Runtime Security & Monitoring"
            subgraph "Intrusion Detection"
                FALCO["<br/>Falco<br/>Runtime Security"]
                TETRAGON["<br/>Tetragon<br/>eBPF Security"]
                CROWDSEC["<br/>CrowdSec<br/>Behavioral Analysis"]
                WAZUH["<br/>Wazuh<br/>SIEM/HIDS"]
            end

            subgraph "Behavioral Analysis"
                BEHAVIOR_ENGINE["<br/>Behavior Analysis<br/>ML Anomaly Detection"]
                THREAT_INTEL["<br/>Threat Intelligence<br/>IOC Feeds"]
            end
        end

        subgraph "Vulnerability Management"
            subgraph "Security Scanning"
                TRIVY["<br/>Trivy<br/>Container Scanner"]
                TRIVY_OPERATOR["<br/>Trivy Operator<br/>K8s Security Scans"]
                CONTAINER_SCAN["<br/>Container Scanning<br/>CI/CD Pipeline"]
                SAST_SCAN["<br/>SAST Scanner<br/>Static Analysis"]
                DAST_SCAN["<br/>DAST Scanner<br/>Dynamic Analysis"]
            end

            subgraph "Compliance"
                DEPENDENCY_SCAN["<br/>Dependency Scanner<br/>SCA Analysis"]
                CIS_BENCHMARK["<br/>CIS Benchmarks<br/>Compliance Checks"]
                NIST_COMPLIANCE["<br/>NIST Framework<br/>Security Controls"]
            end
        end

        subgraph "Secrets Management"
            subgraph "External Secrets"
                EXTERNAL_SECRETS["<br/>External Secrets<br/>Operator"]
                ONEPASSWORD["<br/>1Password<br/>Secrets Provider"]
                SECRET_STORES["<br/>Secret Stores<br/>Vault Integration"]
            end

            subgraph "Encryption"
                SOPS["<br/>SOPS<br/>Secret Encryption"]
                AGE_KEYS["<br/>Age Keys<br/>Encryption Keys"]
            end
        end

        subgraph "Security Monitoring & Response"
            subgraph "SIEM/SOAR"
                SECURITY_DASHBOARD["<br/>Security Dashboard<br/>Grafana"]
                INCIDENT_RESPONSE["<br/>Incident Response<br/>Automated Workflow"]
                THREAT_HUNTING["<br/>Threat Hunting<br/>Proactive Detection"]
            end

            subgraph "Alerting & Notification"
                SECURITY_ALERTS["<br/>Security Alerts<br/>Prometheus Rules"]
                GOTIFY["<br/>Gotify<br/>Push Notifications"]
                SMTP_RELAY["<br/>SMTP Relay<br/>Email Alerts"]
            end
        end

        subgraph "Application Security"
            subgraph "Web Application Security"
                WAF["<br/>Web App Firewall<br/>Ingress Protection"]
                RATE_LIMITING["<br/>Rate Limiting<br/>DDoS Protection"]
                SECURITY_HEADERS["<br/>Security Headers<br/>HTTP Security"]
            end

            subgraph "API Security"
                API_GATEWAY["<br/>API Gateway<br/>Request Validation"]
                JWT_VALIDATION["<br/>JWT Validation<br/>Token Security"]
            end
        end

        subgraph "Security Orchestration"
            subgraph "Automated Response"
                QUARANTINE["<br/>Auto Quarantine<br/>Threat Isolation"]
                SECURITY_POLICIES["<br/>Security Policies<br/>Pod Security Standards"]
                ADMISSION_CTRL["<br/>Admission Controller<br/>Policy Enforcement"]
            end
        end
    end

    %% Authentication Flow
    LLDAP --> AUTHELIA
    AUTHELIA --> OAUTH2_PROXY
    AUTHENTIK --> OAUTH2_PROXY
    KEYCLOAK --> OAUTH2_PROXY
    GLAUTH --> AUTHELIA

    %% Network Security
    NETWORK_POLICIES --> CILIUM
    TAILSCALE --> CILIUM
    ADGUARD --> BLOCKY
    BLOCKY --> PIHOLE

    %% Runtime Security
    FALCO --> BEHAVIOR_ENGINE
    TETRAGON --> BEHAVIOR_ENGINE
    CROWDSEC --> THREAT_INTEL
    WAZUH --> THREAT_INTEL
    BEHAVIOR_ENGINE --> INCIDENT_RESPONSE

    %% Vulnerability Management
    TRIVY --> TRIVY_OPERATOR
    TRIVY_OPERATOR --> SECURITY_DASHBOARD
    CONTAINER_SCAN --> TRIVY
    SAST_SCAN --> SECURITY_DASHBOARD
    DAST_SCAN --> SECURITY_DASHBOARD
    DEPENDENCY_SCAN --> CIS_BENCHMARK
    CIS_BENCHMARK --> NIST_COMPLIANCE

    %% Secrets Management
    ONEPASSWORD --> EXTERNAL_SECRETS
    SECRET_STORES --> EXTERNAL_SECRETS
    EXTERNAL_SECRETS --> SOPS
    SOPS --> AGE_KEYS

    %% Security Monitoring
    FALCO --> SECURITY_ALERTS
    TRIVY --> SECURITY_ALERTS
    WAZUH --> SECURITY_ALERTS
    SECURITY_ALERTS --> SECURITY_DASHBOARD
    SECURITY_ALERTS --> GOTIFY
    SECURITY_ALERTS --> SMTP_RELAY
    THREAT_HUNTING --> SECURITY_DASHBOARD

    %% Application Security
    OAUTH2_PROXY --> WAF
    WAF --> RATE_LIMITING
    RATE_LIMITING --> SECURITY_HEADERS
    API_GATEWAY --> JWT_VALIDATION

    %% Automated Response
    INCIDENT_RESPONSE --> QUARANTINE
    SECURITY_POLICIES --> ADMISSION_CTRL
    ADMISSION_CTRL --> QUARANTINE

    %% Integration with Observability
    SECURITY_DASHBOARD -.->|"Security Metrics"| SECURITY_ALERTS
    THREAT_INTEL -.->|"IOC Updates"| FALCO
    BEHAVIOR_ENGINE -.->|"ML Models"| CROWDSEC

Secrets Management Integration

graph TB
    subgraph "Secrets Management Integration"
        subgraph "External Secrets Sources"
            ONEPASSWORD["<br/>1Password"]
            VAULT["<br/>HashiCorp Vault"]
            CLOUD_SECRETS["<br/>Cloud Providers"]
        end

        subgraph "Secrets Core"
            EXTERNAL_SECRETS["<br/>External Secrets<br/>Operator"]
            K8S_SECRETS["<br/>Kubernetes<br/>Secrets"]
            SOPS["<br/>SOPS<br/>GitOps Encryption"]
        end

        subgraph "Identity & Access"
            AUTHELIA["<br/>Authelia"]
            OAUTH2_PROXY["<br/>OAuth2-Proxy"]
            LLDAP["<br/>LLDAP"]
        end

        subgraph "Security Monitoring"
            FALCO["<br/>Falco"]
            WAZUH["<br/>Wazuh"]
            TRIVY["<br/>Trivy"]
        end

        subgraph "Observability"
            PROMETHEUS["<br/>Prometheus"]
            GRAFANA["<br/>Grafana"]
            LOKI["<br/>Loki"]
        end

        subgraph "Data & Storage"
            POSTGRES["<br/>PostgreSQL"]
            REDIS["<br/>Redis"]
            S3_STORAGE["<br/>S3 Storage"]
        end

        subgraph "Network & Ingress"
            CERT_MANAGER["<br/>Cert-Manager"]
            INGRESS["<br/>Ingress NGINX"]
            CILIUM["<br/>Cilium"]
        end
    end

    %% External Sources to Core
    ONEPASSWORD --> EXTERNAL_SECRETS
    VAULT --> EXTERNAL_SECRETS
    CLOUD_SECRETS --> EXTERNAL_SECRETS

    %% Core Secret Management
    EXTERNAL_SECRETS --> K8S_SECRETS
    SOPS --> K8S_SECRETS

    %% Identity & Access
    K8S_SECRETS --> AUTHELIA
    K8S_SECRETS --> OAUTH2_PROXY
    K8S_SECRETS --> LLDAP

    %% Security Monitoring
    K8S_SECRETS --> FALCO
    K8S_SECRETS --> WAZUH
    K8S_SECRETS --> TRIVY

    %% Observability
    K8S_SECRETS --> PROMETHEUS
    K8S_SECRETS --> GRAFANA
    K8S_SECRETS --> LOKI

    %% Data & Storage
    K8S_SECRETS --> POSTGRES
    K8S_SECRETS --> REDIS
    K8S_SECRETS --> S3_STORAGE

    %% Network & Ingress
    K8S_SECRETS --> CERT_MANAGER
    K8S_SECRETS --> INGRESS
    K8S_SECRETS --> CILIUM

    %% Cross-component dependencies
    AUTHELIA -.->|"Sessions"| REDIS
    GRAFANA -.->|"Database"| POSTGRES
    PROMETHEUS -.->|"Storage"| S3_STORAGE
    LOKI -.->|"Storage"| S3_STORAGE

Networking architecture overview

graph TD
    A[Internet] --> B[Cloudflare Production CDN/WAF]
    B --> C[Cloudflare Secure Tunnel]
    C --> D[Production External Gateway 192.168.8.139]

    A --> E[Enterprise Edge Router 192.168.8.1]
    E --> F[Production BGP Peer 192.168.8.145]
    E --> G[Enterprise Storage Array 192.168.8.161]

    A --> H[Enterprise VPN Infrastructure]
    H --> I[Twingate Zero Trust Access]
    H --> J[Tailscale Production Mesh]
    H --> K[WireGuard Production Gateway]
    H --> L[OpenVPN Enterprise Gateway]

    subgraph M[Production Kubernetes Infrastructure]
        N[HA Control Plane VIP 192.168.8.136]
        O[Cilium Production CNI with eBPF]
        P[Multus Enterprise Multi-Network]
        Q[Production BGP Control Plane]

        R[Production External Gateway 192.168.8.139]
        S[Production Internal Gateway 192.168.8.138]
        T[Enterprise DNS Gateway 192.168.8.137]

        U[Production Network Policies]
        V[Cilium Enterprise Security Policies]
        W[Zero Trust Production Network]
        X[Enterprise Service Mesh Security]

        Y[Production CoreDNS Cluster]
        Z[Enterprise AdGuard DNS Security]
        AA[Production Blocky DNS Filter]
        BB[Enterprise Pi-hole Protection]
        CC[Production DNS Threat Protection]

        DD[Production Authentik Identity Platform]
        EE[Enterprise Authelia Authentication]
        FF[Production LLDAP Directory]
        GG[Enterprise OAuth2 Proxy]
        HH[Production Keycloak SSO]

        II[Production Falco Runtime Security]
        JJ[Enterprise Tetragon eBPF Security]
        KK[Production CrowdSec IPS/IDS]
        LL[Enterprise Wazuh SIEM Platform]
        MM[Production Behavior Analysis Engine]

        NN[Enterprise External Secrets Operator]
        OO[Production Cert Manager TLS]
        PP[Enterprise 1Password Integration]
        QQ[Production SOPS Encryption]

        RR[Production OPA Gatekeeper Policies]
        SS[Enterprise Pod Security Standards]
        TT[Production Admission Controllers]
        UU[Enterprise Trivy Vulnerability Scanner]

        VV[Production Security Operations Center]
        WW[Enterprise Incident Response Automation]
        XX[Production Threat Hunting Platform]
        YY[Enterprise Vector Log Aggregation 192.168.8.113]
        ZZ[Production Alertmanager Security]

        AAA[Production PostgreSQL Cluster 192.168.8.101]
        BBB[Enterprise Syncthing Service 192.168.8.117]
        CCC[Production VerneMQ MQTT Broker 192.168.8.127]
        DDD[Enterprise Graphite Metrics 192.168.8.109]
    end

    E --> M
    F --> Q
    H --> M

    O --> R
    O --> S
    O --> T
    O --> U

    T --> Y
    Y --> Z
    Z --> AA
    AA --> BB
    BB --> CC

    R --> GG
    GG --> DD
    DD --> FF
    EE --> FF

    II --> KK
    JJ --> MM
    KK --> LL

    OO --> R
    OO --> S
    NN --> PP

    RR --> TT
    SS --> TT
    UU --> VV

    II --> VV
    VV --> WW
    VV --> XX

    M --> G

Service Interconnection Architecture

graph TD
    %% External Layer
    Internet[Internet/WAN]
    CloudFlare[Cloudflare CDN/WAF]
    CloudflareTunnel[Cloudflare Tunnel]
    EdgeRouter[Enterprise Edge Router 192.168.8.1]
    BGPPeer[BGP Peer 192.168.8.145]
    TrueNAS[TrueNAS Storage 192.168.8.161]

    %% VPN Layer
    Twingate[Twingate Zero Trust]
    Tailscale[Tailscale Mesh]
    WireGuard[WireGuard Gateway]
    OpenVPN[OpenVPN Gateway]

    %% Kubernetes Core
    ControlPlane[Control Plane VIP 192.168.8.136]
    Cilium[Cilium CNI eBPF]
    BGPControl[BGP Control Plane]

    %% Gateways
    ExtGW[External Gateway 192.168.8.139]
    IntGW[Internal Gateway 192.168.8.138]
    K8sGW[K8s Gateway 192.168.8.137]

    %% DNS Stack
    CoreDNS[CoreDNS]
    AdGuard[AdGuard Home]
    Blocky[Blocky Filter]
    PiHole[Pi-hole]

    %% Identity Stack
    Authentik[Authentik IDP]
    OAuth2Proxy[OAuth2 Proxy]
    LLDAP[LLDAP Directory]
    Authelia[Authelia Auth]

    %% Security Stack
    Falco[Falco Runtime Security]
    Tetragon[Tetragon eBPF]
    CrowdSec[CrowdSec IPS]
    WazuhSIEM[Wazuh SIEM]

    %% Network Security
    NetworkPolicies[Network Policies]
    CiliumNetPol[Cilium Policies]
    ServiceMesh[Service Mesh]

    %% Secrets & Certs
    ExternalSecrets[External Secrets]
    CertManager[Cert Manager]
    OnePassword[1Password]
    SOPS[SOPS Encryption]

    %% Monitoring & Alerting
    Vector[Vector 192.168.8.113]
    Alloy[Alloy Collector]
    Prometheus[Prometheus]
    Grafana[Grafana]
    Alertmanager[Alertmanager]

    %% SOC Platform
    SecurityDashboard[Security Dashboard]
    IncidentResponse[Incident Response]
    ThreatHunting[Threat Hunting]

    %% Application Services
    PostgresLB[PostgreSQL 192.168.8.101]
    SyncthingLB[Syncthing 192.168.8.117]
    VerneMQLB[VerneMQ 192.168.8.127]
    GraphiteLB[Graphite 192.168.8.109]

    %% Policy & Compliance
    OPAGatekeeper[OPA Gatekeeper]
    AdmissionController[Admission Controllers]
    TrivyOperator[Trivy Scanner]

    %% External Connections
    Internet -->|HTTPS/TLS| CloudFlare
    CloudFlare -->|Encrypted Tunnel| CloudflareTunnel
    CloudflareTunnel -->|TLS 1.3| ExtGW

    Internet -->|Router/Firewall| EdgeRouter
    EdgeRouter -->|BGP Routes| BGPPeer
    EdgeRouter -->|NFS/SMB| TrueNAS
    EdgeRouter -->|Cluster Network| ControlPlane

    %% VPN Interconnections
    Internet -->|Zero Trust| Twingate
    Internet -->|Mesh VPN| Tailscale
    Twingate -->|Encrypted| WireGuard
    Tailscale -->|WG Protocol| WireGuard
    WireGuard -->|VPN Traffic| Cilium
    OpenVPN -->|Legacy VPN| Cilium

    %% BGP and Routing
    BGPPeer -->|Route Advertisement| BGPControl
    BGPControl -->|Load Balancer IPs| Cilium
    Cilium -->|L2 Announcements| EdgeRouter

    %% CNI and Gateway Integration
    ControlPlane -->|API Server| Cilium
    Cilium -->|Gateway API| ExtGW
    Cilium -->|Gateway API| IntGW
    Cilium -->|DNS Services| K8sGW
    Cilium -->|Network Policies| NetworkPolicies
    Cilium -->|Security Policies| CiliumNetPol

    %% DNS Resolution Chain
    K8sGW -->|DNS Queries| CoreDNS
    CoreDNS -->|Upstream DNS| AdGuard
    AdGuard -->|Filtered Queries| Blocky
    Blocky -->|Ad Blocking| PiHole
    PiHole -->|Clean DNS| EdgeRouter

    %% Identity and Authentication Flow
    ExtGW -->|Auth Required| OAuth2Proxy
    IntGW -->|Auth Required| OAuth2Proxy
    OAuth2Proxy -->|OIDC/SAML| Authentik
    OAuth2Proxy -->|Session Auth| Authelia
    Authentik -->|User Directory| LLDAP
    Authelia -->|User Directory| LLDAP

    %% Security Monitoring Integration
    Cilium -->|eBPF Events| Tetragon
    Cilium -->|Network Events| Falco
    Tetragon -->|Security Events| CrowdSec
    Falco -->|Runtime Events| CrowdSec
    CrowdSec -->|Threat Intelligence| WazuhSIEM
    WazuhSIEM -->|SIEM Data| SecurityDashboard

    %% Service Mesh Security
    Cilium -->|mTLS Enforcement| ServiceMesh
    ServiceMesh -->|Encrypted Traffic| ApplicationServices
    NetworkPolicies -->|Traffic Control| ServiceMesh
    CiliumNetPol -->|eBPF Filtering| ServiceMesh

    %% Certificate and Secret Management
    CertManager -->|TLS Certificates| ExtGW
    CertManager -->|TLS Certificates| IntGW
    CertManager -->|Service Certificates| ServiceMesh
    ExternalSecrets -->|Secret Sync| OnePassword
    ExternalSecrets -->|Encrypted Secrets| SOPS
    SOPS -->|Git Encryption| ExternalSecrets

    %% Observability Data Flow
    Cilium -->|Metrics/Logs| Vector
    Tetragon -->|Security Metrics| Vector
    Falco -->|Security Logs| Vector
    CrowdSec -->|IPS Metrics| Vector
    Vector -->|Aggregated Data| Prometheus
    Vector -->|Log Streams| Alloy
    Alloy -->|Telemetry| Prometheus
    Prometheus -->|Metrics| Grafana
    Prometheus -->|Alerts| Alertmanager

    %% Security Operations Integration
    WazuhSIEM -->|Security Alerts| Alertmanager
    SecurityDashboard -->|Incident Data| IncidentResponse
    SecurityDashboard -->|Threat Data| ThreatHunting
    IncidentResponse -->|Auto Remediation| CiliumNetPol
    IncidentResponse -->|Quarantine| NetworkPolicies

    %% Policy and Compliance
    OPAGatekeeper -->|Policy Validation| AdmissionController
    AdmissionController -->|Pod Validation| ControlPlane
    TrivyOperator -->|Vulnerability Scans| SecurityDashboard
    TrivyOperator -->|Security Metrics| Prometheus

    %% Application Load Balancer Integration
    Cilium -->|Load Balancing| PostgresLB
    Cilium -->|Load Balancing| SyncthingLB
    Cilium -->|Load Balancing| VerneMQLB
    Cilium -->|Load Balancing| GraphiteLB

    %% Storage Integration
    PostgresLB -->|Database Storage| TrueNAS
    SyncthingLB -->|File Storage| TrueNAS
    Vector -->|Log Storage| TrueNAS

    %% Alerting and Notification Flow
    Alertmanager -->|Security Alerts| IncidentResponse
    Alertmanager -->|Critical Alerts| SecurityDashboard
    SecurityDashboard -->|SOC Alerts| ThreatHunting

    %% Application Services defined for clarity
    subgraph ApplicationServices [Application Services]
        PostgresLB
        SyncthingLB
        VerneMQLB
        GraphiteLB
    end

FinOps(Kubecost) architecture overview

graph TB
    subgraph "External"
        U[Users] --> LB[Load Balancer]
        LB --> IG[Ingress Gateway]
    end

    subgraph "Security Layer"
        IG --> OA[OAuth2 Proxy]
        GK[Gatekeeper] --> |Policy Enforcement| KF
        NP[NetworkPolicies] --> |Zero-Trust| KF
    end

    subgraph "Kubecost Application"
        OA --> KF[Frontend Pods x5]
        KF --> KC[Cost Model Pods x3]
        KC --> KO[Cost Optimizer x2]
        KC --> KCC[Cluster Controller x2]
    end

    subgraph "Data Layer"
        KC --> PVC[Persistent Storage 500GB]
        KC --> MIN[MinIO Object Storage]
        KC --> PROM[Prometheus]
    end

    subgraph "Monitoring"
        KF --> SM[ServiceMonitor]
        KC --> PR[PrometheusRules]
        SM --> PROM
        PR --> AM[AlertManager]
    end

    subgraph "Auto-scaling"
        HPA[HPA] --> |Scale| KF
        VPA[VPA] --> |Resources| KC
    end

🤝 Thanks

I want to give credit to a few great resources:

The (cluster-template)[https://github.com/onedr0p/cluster-template] on GitHub.
The (Home Operations)[https://discord.gg/home-operations] Discord community.
For deployment ideas and strategies, visit (kubesearch.dev)[https://kubesearch.dev/].

Name		Name	Last commit message	Last commit date
Latest commit History 2,485 Commits
.github		.github
.taskfiles		.taskfiles
bootstrap		bootstrap
kubernetes		kubernetes
scripts		scripts
talos		talos
templates		templates
.editorconfig		.editorconfig
.envrc		.envrc
.gitattributes		.gitattributes
.gitignore		.gitignore
.gitleaks.toml		.gitleaks.toml
.justfile		.justfile
.lefthook.toml		.lefthook.toml
.minijinja.toml		.minijinja.toml
.mise.toml		.mise.toml
.pre-commit-config.yaml		.pre-commit-config.yaml
.releaserc.json		.releaserc.json
.renovaterc.json5		.renovaterc.json5
.semver.yaml		.semver.yaml
.shellcheckrc		.shellcheckrc
.sops.yaml		.sops.yaml
.yamlfmt.yaml		.yamlfmt.yaml
001-create-citus-extension.sql		001-create-citus-extension.sql
CHANGELOG.md		CHANGELOG.md
Dockerfile		Dockerfile
LICENSE		LICENSE
README.md		README.md
Taskfile.yaml		Taskfile.yaml
makejinja.toml		makejinja.toml
renovate.json		renovate.json
secrets.yaml		secrets.yaml
tailscale-config.yaml		tailscale-config.yaml

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Repository files navigation

Home-Ops: Enterprise-Grade Infrastructure & Security Platform

Core components

Core Components Architecture

Observability architecture overview

Storage architecture overview

Storage Components Overview

Data platform architecture overview

Data Platform Service Interconnections

Security architecture overview

Secrets Management Integration

Networking architecture overview

Service Interconnection Architecture

FinOps(Kubecost) architecture overview

🤝 Thanks

About

Uh oh!

Releases 1,168

Sponsor this project

Uh oh!

Packages

Uh oh!

Uh oh!

Contributors

Uh oh!

Languages

Uh oh!

Folders and files

Latest commit

History

Repository files navigation

Home-Ops: Enterprise-Grade Infrastructure & Security Platform

Core components

Core Components Architecture

Observability architecture overview

Storage architecture overview

Storage Components Overview

Data platform architecture overview

Data Platform Service Interconnections

Security architecture overview

Secrets Management Integration

Networking architecture overview

Service Interconnection Architecture

FinOps(Kubecost) architecture overview

🤝 Thanks

About

Topics

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases 1,168

Sponsor this project

Uh oh!

Packages 0

Uh oh!

Uh oh!

Contributors

Uh oh!

Languages

Packages