Services

This section documents individual platform services.

Each page answers the same practical questions:

• what the service is for
• what it depends on
• what depends on it
• which files activate it in this repository

Current pages

• vault: secret storage backend for the cluster
• external-secrets: syncs Kubernetes secrets from Vault into workloads
• cloudflared: consumes synced secrets to expose selected services externally

Dependency chain

infrastructure
└── vault
    └── external-secrets
        └── cloudflared

The rollout wiring for that chain lives in:

• gitops/clusters/lab/infrastructure-controllers.yaml
• gitops/clusters/lab/infrastructure-configs.yaml
• gitops/infrastructure/configs/lab/kustomization.yaml