A production-ready platform you can actually deploy
Not a slide deck and not a toy cluster. Every component here runs, is reconciled by Flux, and is gated in CI — a private PKI, zero-trust networking, a developer-facing abstraction over managed infrastructure, and a full observability stack. Deploy it into your own account in about thirty minutes, or read how each piece was chosen.
Deploy in 30 minutes View on GitHub
The whole platform, on one page
What this repository is for
Bootstrap a platform
Three sequential stages — network, secrets, Kubernetes — driven by OpenTofu and Terramate. One command per stage, and the cluster comes up with Cilium, Flux and Karpenter already running.
Learn the concepts
GitOps as a dependency hierarchy rather than a slogan. Progressive complexity in a platform API. Zero trust that is enforced by policy, not asserted in a README.
Evaluate the tools
Cilium, Flux, Crossplane, OpenBao, VictoriaMetrics, Gateway API, Karpenter, KEDA — each with what it actually buys you here, and what it cost to adopt.
Make it yours
Which values are environment-specific, what to strip out, what the minimum viable subset is, and roughly what it costs to run.
Browse the docs
Get Started
Prerequisites, the deploy path, first application, teardown.
Platform
Every domain: foundations, GitOps, networking, security, developer platform, observability, AI.
Concepts
The ideas the platform demonstrates, and how it is built.
Guides
Fork and adapt, add an application, add a cloud provider, troubleshoot.
Reference
Repository layout, technology stack, commands, CI, the platform constitution.
Decisions
Architecture decision records — what was chosen, and what it was chosen over.
Runs on AWS EKS today. A second cloud is designed but not yet implemented — see ADR-0007 for where the platform draws its cloud boundary.