Concepts

Pulumi builds the VMs, the cluster and the Bifrost edge from a laptop; Argo CD deploys every workload from CDK8s-synthesized manifests. These pages explain the four cross-cutting flows that component pages link back to.

How traffic flowsPublic, LAN and VPN paths from a client to a pod.

Cluster layoutNode roles and what runs where.

GitOps pipelinePulumi for infrastructure, CDK8s and Argo CD for workloads.

Secrets modelSOPS for bootstrap, OpenBao and the CSI driver at runtime.