Infrastructure
Terraform that provisions the cluster and the GCP-side resources it leans on, plus the Talos machine configurations applied to each node. Everything past bootstrap is reconciled by ArgoCD.
Infrastructure
Terraform that provisions the cluster and the GCP-side resources it leans on, plus the Talos machine configurations applied to each node. Everything past bootstrap is reconciled by ArgoCD.
Architecture decisions
ADRs for the load-bearing choices — thin Terraform plus ArgoCD, Cilium as the unified networking layer, External Secrets Operator against Google Secret Manager, and the rest.
Networking
How traffic gets in and how names resolve: a Cilium L2-announced LB
pool on the LAN and split-horizon DNS with AdGuard Home in front of
lab.jackhall.dev.
Platform
The cluster-side services Terraform installs before ArgoCD takes over — ArgoCD itself, cert-manager, External Secrets Operator, and local-path-provisioner. See the Platform overview for the bootstrap order and how they interact.
Applications
The ArgoCD-managed addons running in the cluster — AdGuard Home,
Homepage, Hubble UI, the lab Gateway, ARC runners, metrics-server.
See the Applications index for the full list.
Public by design
These docs are intentionally consumable by a general audience — no secrets, no host-specific credentials.