{
  "markdown": "# Cloud Native Platform Reference\n\n**_An opinionated, production-ready Kubernetes platform using GitOps principles._**\n\nA reference implementation of a complete cloud-native platform on AWS EKS: infrastructure as\ncode with OpenTofu and Crossplane, continuous delivery with Flux, a private PKI and zero-trust\nnetworking, a full observability stack, and a developer-facing abstraction that turns one small\nYAML claim into a whole application.\n\n📖 **Full documentation: [cnref.ogenki.io](https://cnref.ogenki.io)**\n\n## Architecture\n\n![Platform Architecture](docs/architecture/img/platform-overview.png)\n\n> Editable source: [`docs/architecture/platform-overview.drawio`](docs/architecture/platform-overview.drawio)\n\nThree bands: the **cloud's managed services** on the left, with their AWS and GCP equivalents\nside by side (Route 53 / Cloud DNS, ELB / Cloud Load Balancing, IAM via EKS Pod Identity / GKE\nWorkload Identity, S3 / Cloud Storage, KMS / Cloud KMS), the **Kubernetes cluster** in the centre\nin four tiers (GitOps & composition, compute & networking, security & identity, observability),\nand **applications & data** on the right. Flux reconciles the repository; Tailscale provides\nprivate access; OpenBao holds the secrets and the PKI. The self-hosted LLM platform is opt-in and\noff by default.\n\nEvery subsystem is explained at\n[cnref.ogenki.io/docs/platform](https://cnref.ogenki.io/docs/platform/).\n\n## Quickstart\n\nRoughly 30 minutes end to end. You need an AWS account with admin permissions, a registered\ndomain in Route53, a Tailscale account, and a GitHub App or token for Flux. Full prerequisites\nand the annotated walkthrough are in\n[Get Started](https://cnref.ogenki.io/docs/get-started/).\n\n```bash\n# 1. Point the platform at your environment\n$EDITOR opentofu/config.tm.hcl        # region, cluster name, domains, chart versions\n\n# 2. Provide the one secret that is not in AWS Secrets Manager\nexport TF_VAR_tailscale_api_key=<your-tailscale-api-key>\n\n# 3. Network, then OpenBao (~15 min)\ncd opentofu && terramate script run deploy\n\n# 4. EKS — two stages: cluster on a temporary CNI, then Cilium + Flux (~15 min)\ncd aws/eks/init && terramate script run deploy\n\n# 5. Get a kubeconfig\naws eks update-kubeconfig --region eu-west-3 --name aws-0\n\n# 6. Watch Flux build the rest of the platform\nflux get all\n```\n\nFlux takes over from there: security (External Secrets, cert-manager, Kyverno), infrastructure\n(Cilium, Gateway API, ExternalDNS, Karpenter), observability (VictoriaMetrics, VictoriaLogs,\nGrafana) and tooling (Harbor, Headlamp, Homepage).\n\n## Documentation\n\nFull documentation — deploy guides, platform internals, concepts, and the\narchitecture decision records — is published at **[cnref.ogenki.io](https://cnref.ogenki.io)**.\n\n- [Get Started](https://cnref.ogenki.io/docs/get-started/) — deploy the platform in about 30 minutes\n- [Platform](https://cnref.ogenki.io/docs/platform/) — every domain, what runs and why\n- [Concepts](https://cnref.ogenki.io/docs/concepts/) — the ideas the platform is built on\n- [Guides](https://cnref.ogenki.io/docs/guides/) — fork and adapt, add an application, troubleshoot\n- [Reference](https://cnref.ogenki.io/docs/reference/) — technology stack, commands, repository layout\n- [Decisions](https://cnref.ogenki.io/docs/decisions/) — what was chosen, and what over\n\nThe blog posts that explain several of these components in long form are collected under\n[Further reading](https://cnref.ogenki.io/docs/reference/further-reading/).\n\n## Repository Structure\n\n```\n.\n├── opentofu/                      # 🔧 Infrastructure as Code\n│   ├── aws/                       # AWS stacks\n│   │   ├── network/               # VPC, Tailscale VPN\n│   │   ├── openbao/               # Secrets management and PKI\n│   │   ├── eks/                   # Kubernetes cluster (two-stage)\n│   │   │   ├── init/              # Stage 1: EKS + bootstrap addons\n│   │   │   └── configure/         # Stage 2: Cilium + Flux\n│   │   └── llm-platform/          # Opt-in: S3 Files + IAM for the LLM platform\n│   ├── gcp/                       # GCP stacks\n│   │   ├── network/               # VPC, Tailscale VPN\n│   │   ├── openbao/               # Secrets management and PKI\n│   │   └── gke/                   # Kubernetes cluster (two-stage)\n│   │       ├── init/              # Stage 1: GKE cluster\n│   │       └── configure/         # Stage 2: Cilium + Flux\n│   └── shared/                    # Owned by neither cloud (Tailscale tailnet, AWS↔GCP federation)\n├── flux/                          # 🚀 Flux operator and configuration\n├── clusters/aws-0/          # Cluster-specific Kustomizations\n├── infrastructure/                # 🏗️ Platform infrastructure\n├── security/                      # 🔒 Security components\n├── observability/                 # 👁️ Monitoring and logging\n├── tooling/                       # 🛠️ Platform tools\n├── apps/                          # 📦 Applications, as App claims\n├── crds/                          # Custom Resource Definitions\n├── website/                       # 📚 The documentation site (Hugo + Hextra)\n├── docs/                          # Architecture diagrams, specs, design artifacts\n└── scripts/                       # Automation and validation\n```\n\n## AI-Assisted Development\n\nThis repository leverages a coding agent for code generation, troubleshooting, and\ndocumentation. [CLAUDE.md](CLAUDE.md) provides project context and platform-specific knowledge.\nNon-trivial changes go through the [Superpowers](https://github.com/obra/superpowers) workflow —\na design document is brainstormed and approved, turned into an implementation plan, then\nexecuted task by task, with every artifact committed under\n[docs/superpowers/](docs/superpowers/). A [platform constitution](docs/platform-constitution.md)\nstates the non-negotiable rules every design is checked against. The agent also integrates with\nobservability tools via MCP servers (VictoriaMetrics, VictoriaLogs, Flux) for real-time\ndebugging directly from the development environment.\n\n## Contributing and Community\n\nWe welcome contributions, feedback, and questions!\n\n- 🗨️ **[Slack Channel](https://ogenki.slack.com/)**: Chat with the community\n- 💬 **[Discussions](https://github.com/Smana/cloud-native-ref/discussions)**: Ideas, questions, roadmap\n- 🐛 **[Issues](https://github.com/Smana/cloud-native-ref/issues)**: Bug reports and feature requests\n- 📅 **[Project Board](https://github.com/users/Smana/projects/1)**: Task tracking and priorities\n\n**Before contributing**: Review [SECURITY.md](SECURITY.md) for security policy and\n[CLAUDE.md](CLAUDE.md) for development guidelines.\n\n## License\n\nThis project is provided as a reference implementation. Please review individual component licenses.\n\n## Acknowledgments\n\nThis platform builds on the excellent work of many open-source projects:\n\n- [Crossplane](https://www.crossplane.io/) team and community\n- [Flux](https://fluxcd.io/) maintainers and CNCF\n- [Cilium](https://cilium.io/) and eBPF ecosystem\n- [VictoriaMetrics](https://victoriametrics.com/) developers\n- [OpenBao](https://openbao.org/) and Linux Foundation\n- All the maintainers of the tools in this stack\n\n---\n\n**Ready to get started?** → [cnref.ogenki.io/docs/get-started](https://cnref.ogenki.io/docs/get-started/)\n\n**Questions?** → [Join our Slack](https://ogenki.slack.com/)\n",
  "bytes": 7323,
  "sha": "a0b3363a64be7e7e3d9818512aa65fe64f9324a57b08a74a97d7086bb60344a5",
  "repo_slug": "smana/cloud-native-ref",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/skl_smana_cloud_native_ref_claude_skills_cro_684b002c/readme"
}