Skip to main content

K8s Platform Architecture

A self-hosted Kubernetes platform running 9 full-stack applications on a K3s cluster, managed through GitOps with ArgoCD and automated CI/CD pipelines.

Platform at a Glance

LayerTechnology
ClusterK3s (lightweight Kubernetes)
GitOpsArgoCD with automated sync, prune, and self-heal
CI/CDGitHub Actions → Docker Hub → ArgoCD
IngressTraefik with Cloudflare DNS proxy
TLScert-manager with Let's Encrypt
SecretsDoppler + External Secrets Operator
MonitoringPrometheus + Grafana
BackupVelero + Backblaze B2, database logical dumps, DNS/secrets cold storage, CloudCasa
Helmportfolio-common library chart shared across all apps

Deployed Applications

AppStackDatabase
BookmarkedReact, Node.js, ExpressPostgreSQL (Neon + pgvector)
educationELLyReact, Node.js, ExpressMongoDB
educationELLy GraphQLReact, Apollo, Node.jsMongoDB
IntervalAIReact, Node.js, ExpressMongoDB
Code TalkReact, Node.js, ExpressPostgreSQL, Redis
TenantFlowReact, Node.js, ExpressPostgreSQL
PodRickReact— (K8s API)
Pop!_PortfolioReact, Node.js, ExpressPostgreSQL
k8s-ui-libraryStorybook— (static)

Architecture Diagram

Live Dashboards

Documentation Sections

  • Architecture — High-level system design and GitOps workflow
  • Kubernetes — Cluster topology, Helm charts, HPA, ArgoCD
  • Networking — Traefik ingress, TLS, middleware, and domain routing
  • Security — Doppler secrets management, RBAC, and service accounts
  • Databases — PostgreSQL, MongoDB, and Redis instances
  • Applications — Per-app architecture and deployment details
  • CI/CD — GitHub Actions workflows and Docker build strategy
  • Monitoring — Prometheus metrics and Grafana dashboards
  • Backup — Velero, database logical dumps, DNS/secrets cold storage, CloudCasa, automated restore verification
  • AI / ML — Shared AI Gateway, Triton semantic search, and Langfuse observability