| Cilium + Hubble |
Pod networking, network policy, flow visibility |
kube-system |
bootstrap.sh |
Cilium & Hubble |
| JupyterHub |
Workspace orchestration |
jupyterhub, project-* |
Argo CD |
JupyterHub |
| Keycloak |
Identity provider (OIDC), project groups |
keycloak |
Argo CD |
Keycloak |
| Storage |
StorageClasses, home and project volumes |
cluster, project-* |
Argo CD |
Storage |
| Argo CD |
GitOps: deploys everything from Git |
argocd |
bootstrap.sh |
Argo CD |
| Kyverno |
Admission policy and generated guardrails |
kyverno |
Argo CD |
Kyverno |
| Kubescape |
Security posture scanning |
CLI in the dev container |
Dockerfile |
Kubescape |
| Traefik |
HTTP ingress (bundled with k3s) |
kube-system |
k3s |
– |
| Portal |
Landing page |
portal |
Argo CD |
– |