IaC Overview

MEGATRON's infrastructure is managed through a combination of Infrastructure as Code tools: Terraform for cloud resources, Helm for Kubernetes package management, Kustomize for environment-specific overlays, and Docker Compose for non-K3s workloads.

Tool Inventory

ToolPurposeLocations
TerraformCloud provider infrastructure (AWS, Azure, GCP, DO, Hetzner, Vultr, Oracle)/home/lucas/vpn/infrastructure/terraform/
HelmKubernetes application packaging and deploymentMultiple chart directories
KustomizeEnvironment-specific K8s manifest overlaysMultiple overlay directories
Docker ComposeMulti-container local workloads/home/lucas/ultrathink-infra/, /home/lucas/bibliotheca/, etc.

Coverage Map

┌─────────────────────────────────────────────────────────┐
│                   IaC Coverage                           │
│                                                         │
│  ┌──────────────────────┐  ┌─────────────────────────┐  │
│  │  TERRAFORM            │  │  HELM                    │  │
│  │                      │  │                         │  │
│  │  Aegis VPN infra:    │  │  IDP platform:           │  │
│  │  - AWS               │  │  - core-platform        │  │
│  │  - Azure             │  │  - argocd               │  │
│  │  - GCP               │  │  - external-dns         │  │
│  │  - DigitalOcean      │  │  - cnpg                 │  │
│  │  - Hetzner           │  │  - weaviate             │  │
│  │  - Vultr             │  │  - grafana              │  │
│  │  - Oracle            │  │                         │  │
│  └──────────────────────┘  │  Aegis VPN:             │  │
│                            │  - aegis chart          │  │
│  ┌──────────────────────┐  │                         │  │
│  │  KUSTOMIZE            │  │  Kelsey Equipment:      │  │
│  │                      │  │  - irrigation-parts     │  │
│  │  CoreStation:        │  └─────────────────────────┘  │
│  │  - dev overlay       │                               │
│  │  - prod overlay      │  ┌─────────────────────────┐  │
│  │                      │  │  DOCKER COMPOSE          │  │
│  │  Aegis VPN:          │  │                         │  │
│  │  - base              │  │  ULTRATHINK infra:      │  │
│  │  - megatron overlay  │  │  - JupyterLab           │  │
│  │  - dev overlay       │  │  - MLflow               │  │
│  │  - prod overlay      │  │  - TensorBoard          │  │
│  │                      │  │                         │  │
│  │  Kelsey Equipment:   │  │  Bibliotheca stack      │  │
│  │  - demo              │  │  Gene editing env       │  │
│  │  - dev               │  └─────────────────────────┘  │
│  │  - qa                │                               │
│  │  - prod              │                               │
│  └──────────────────────┘                               │
└─────────────────────────────────────────────────────────┘

Coverage Gaps

Several deployed services lack IaC definitions and were likely deployed via manual kubectl apply or UI-based tools:

ServiceCurrent StateRecommended IaC
AuthentikManual / unknownHelm chart
VaultManual / unknownHelm chart
HarborManual / unknownHelm chart
Monitoring stackManual / unknownHelm (kube-prometheus-stack)
LonghornManual / unknownHelm chart
LinkerdManual / unknownHelm chart
STIQUnknownKustomize or Helm
GlamHubUnknownKustomize or Helm