Skip to content

Reference

Subsystem-by-subsystem documentation for the platform. Every page is grounded in the files it describes: the Terragrunt leaves, the Flux manifests, the Ansible playbooks and the module source.

Start here

  • The edge capture platform covers the application domain: the camera fleet, the ingest path, the worker services, and the two deployment models.
  • Environments puts prod, staging and dev side by side: accounts, CIDRs, cluster versions, and which Terraform leaves exist where.
  • AWS accounts & access explains the five-account layout and the SSO permission sets that reach them.

Infrastructure as code

Page Covers
Terragrunt foundation The root configuration, generated backends and providers, the environment map, and the live component inventory.
State & backends Remote state layout, locking, and the state-surgery commands.
AWS network & edge VPC, transit, Site-to-Site VPN, CloudFront, WAF, Route53 and the alerting Lambdas.
AWS platform & data EKS, RDS, ElastiCache, S3, IRSA and the data-tier modules.
Azure The Azure estate: resource groups, VNet, NSGs, storage and virtual desktop.
Network addressing (IPAM) The authoritative CIDR register across both clouds and every client site.
Drift register Known differences between committed configuration and deployed reality.
Tagging & cost Tag conventions and cost-allocation posture.

Kubernetes and delivery

Page Covers
GitOps with Flux Bootstrap roots, sources, Kustomizations, and image automation.
Applications The Flux wiring for each application repo.
Utility workloads The CronJobs, exporters and reconcilers that run from the infra repo.
Controllers & configs cert-manager, external-dns, external-secrets, tunnels and image-pull config.
Observability Prometheus, Thanos, Loki, Grafana, blackbox probes and the exporter fleet.
Data services CloudNativePG, Postgres, Valkey, MinIO and the stateful tier.
Security & AppSec services SonarQube, DefectDojo, Dependency-Track, runners and session replay.
Releases & promotion How application images are versioned, published and promoted.

Operations

Page Covers
Ansible Inventory, playbooks and roles for cluster bootstrap and fleet operations.
CI/CD & tooling Workflows, the security gate, pre-commit and the supporting automation.
Alerting & on-call Alert inventory, routing, escalation and silences.
Incident response Severities, comms, and the first-response playbooks.
Rollback procedures Undoing a bad change at each layer of the stack.
Backup & disaster recovery What is backed up, where, and how to restore it.
Secrets (SOPS + Age) The encrypted-secret workflow and how Flux decrypts it.
Secret stores & key custody Every place secret material lives, and the rotation blast radius.
DNS & certificates Zones, records, issuance and the certificate inventory.
Legacy & orphans Dead code, stale trees and known technical debt.