Quick facts

Image
Default LTS (custom plugin-baked image on the roadmap)
Auth
Local admin (escape-hatch); OIDC against Keycloak planned

What it is

Standard Helm chart install. Future work: bake a custom controller image with plugins.txt pre-installed using the same podman + ctr import pattern used for redis-applier.

Architecture

Add diagrams or topology notes here — how this component sits relative to DC/DR, what replicates, and what speaks to it. Mermaid blocks render as plain text today; embed images under /assets/ when needed.

Configuration

Add chart values overrides, important env vars, OIDC client config, secret references. Link to the source files in infra/gitops-rke2 rather than copying YAML wholesale — the repo is the source of truth.

Operations

Add runbook notes: backup, restore, common troubleshooting, dashboards, on-call cheatsheet entries.

Failover

Add DC/DR cutover/cutback notes: edge HAProxy backend name, healthcheck path, measured cutover/cutback times, smoke-test commands.

References