Platform Services

Services provide capabilities shared by applications: reconciliation, networking, secret delivery, external access, hardware enablement, databases, and observability.

Active services

Service	Version	Responsibility	Managed here
Flux CD	`2.x`	Reconciles Git into Kubernetes	Yes
MetalLB	`0.16.1`	Advertises the LAN load-balancer address	Yes
Traefik	Chart `41.x.x`	Routes local HTTP traffic	Yes
Vault	Chart `0.34.0`	Stores sensitive values	Yes
External Secrets	Chart `0.20.3`	Synchronizes Vault values into Kubernetes	Yes
Cloudflared	`2026.7.1`	Connects public Cloudflare traffic to services	Yes
NVIDIA GPU Operator	`v26.3.3`	Enables and validates GPU workloads	Yes
Local Path Provisioner	`v0.0.36`	Dynamically provisions local persistent storage	Yes
CloudNativePG	Chart `0.29.0`	Manages PostgreSQL clusters	Yes
kube-prometheus-stack	Chart `87.15.2`	Collects metrics, evaluates alerts, and serves dashboards	Yes
Metrics Server	Chart `3.13.1`	Publishes recent resource usage through the Metrics API	Yes

Dependency shape

flowchart TB
    Flux[Flux CD] --> Controllers[MetalLB, Traefik, External Secrets, Local Path, CNPG]
    Controllers --> Configs[Vault, address pool, secret store, Cloudflared]
    Vault --> ESO[External Secrets]
    ESO --> Cloudflared[Cloudflared]
    ESO --> Monitoring[Prometheus and Grafana]
    MetalLB --> Traefik[Traefik]
    Traefik --> Apps[Applications]
    Traefik --> Monitoring
    Cloudflared --> Apps

For procedures, use Runbooks. For request and secret paths, use Architecture.