كتالوج المكونات
المكونات الكاملة
57 مكون إنتاج عبر 9 فئات — كلها مفتوحة المصدر، كلها مُختبرة ميدانيًا.
Infrastructure & OS
The bare-metal foundation: immutable OS, container runtime, and cluster orchestration.
Talos Linux
productionMinimal, immutable Linux distribution designed specifically for Kubernetes. No SSH, no shell — managed entirely through API.
الدور: Node operating system for all Talos cluster nodes (3 control plane + 3 workers, including 1 GPU worker)
containerd
productionIndustry-standard container runtime with low overhead and broad compatibility.
الدور: Container runtime on all nodes
Kubernetes
productionProduction-grade container orchestration system for automating deployment, scaling, and management.
الدور: Core orchestration platform running v1.35.2
Networking & Service Mesh
eBPF-powered networking, Gateway API ingress, service mesh, and DNS resolution.
Cilium
productioneBPF-based networking, observability, and security. Replaces kube-proxy with high-performance service load balancing.
الدور: CNI plugin, network policy enforcement, L2 ARP announcement, Gateway API implementation
Hubble
productionNetwork observability platform built on Cilium eBPF data plane for deep visibility into communication and behavior.
الدور: Network flow observability, service dependency mapping
Gateway API
productionNext-generation Kubernetes ingress API with expressive routing, TLS termination, and traffic splitting.
الدور: Single shared gateway handling all HTTP/HTTPS traffic at 192.168.0.200
APISIX
productionHigh-performance, cloud-native API gateway with rich traffic management features.
الدور: Advanced API gateway for complex routing scenarios
CoreDNS
productionFlexible, extensible DNS server for Kubernetes service discovery.
الدور: Cluster DNS with wildcard resolution for *.exitthecloud.eu
Security & Identity
Zero-trust security: SSO, secrets management, policy enforcement, runtime detection, and certificate automation.
Keycloak
productionEnterprise identity and access management with OIDC, SAML, social login, and LDAP integration.
الدور: Centralized SSO for all platform services — Vault, Harbor, Grafana, ArgoCD, OneDev, Devtron
HashiCorp Vault
productionSecrets management, encryption as a service, and privileged access management.
الدور: HA deployment (3-replica Raft cluster) storing all platform secrets, DNS credentials, TLS certificates
External Secrets Operator
productionKubernetes operator that synchronizes secrets from external stores into Kubernetes secrets.
الدور: Bridges Vault ↔ Kubernetes: syncs secrets to pods, pushes certificates back to Vault
cert-manager
productionAutomatic TLS certificate management with Let's Encrypt ACME protocol support.
الدور: Automated certificate issuance via DNS-01 challenges with Cloudflare
Kyverno
productionKubernetes-native policy engine for validation, mutation, and generation of resources.
الدور: Enforces security policies, injects PriorityClasses via mutation for charts that don't propagate values, image proxy rewriting to Harbor
Kubescape
deployedKubernetes security platform for continuous scanning against NSA, MITRE, and CIS benchmarks.
الدور: Compliance scanning and hardening recommendations
Open AppSec
deployedML-based web application firewall and API security.
الدور: WAF protection for exposed services
Observability
Full-spectrum observability: metrics, logs, traces, profiles, and cost monitoring in a unified stack.
Prometheus
productionPull-based metrics collection with multi-dimensional data model and powerful PromQL query language.
الدور: Primary metrics scraping for all platform services via ServiceMonitors
Grafana
productionVisualization platform connecting metrics, logs, traces, and profiles in unified dashboards.
الدور: Central observability UI with pre-built dashboards for every platform component
Mimir
productionHorizontally-scalable long-term metrics storage with Prometheus-compatible API.
الدور: Indefinite metrics retention with high compression and fast queries
Loki
productionLog aggregation system inspired by Prometheus — indexes labels, not full log lines.
الدور: Centralized logging with LogQL queries across all namespaces
HolmesGPT
productionAI-powered DevOps and Kubernetes troubleshooting assistant.
الدور: 24/7 background operator for autonomous investigation and scheduled health checks using Minimax LLM
Tempo
productionDistributed tracing backend supporting Jaeger, Zipkin, and OpenTelemetry formats.
الدور: End-to-end request tracing across microservices
Pyroscope
productionContinuous profiling platform for CPU, memory, goroutine, and lock contention analysis.
الدور: Runtime performance profiling with flame graph visualization
Grafana Alloy
productionUnified telemetry collector replacing Promtail, Grafana Agent, and OpenTelemetry Collector.
الدور: Single agent collecting metrics, logs, traces, and profiles from all nodes
OpenCost
productionReal-time Kubernetes cost monitoring with per-namespace and per-workload breakdown.
الدور: Infrastructure cost visibility and optimization recommendations
GitOps & CI/CD
Git-driven deployment pipelines with progressive delivery and infrastructure-as-code.
Argo CD
productionGitOps continuous delivery tool that reconciles desired state from Git with cluster state.
الدور: Core GitOps engine with App-of-Apps pattern managing 43+ applications
Terraform
productionInfrastructure as Code for provisioning and managing cloud-agnostic resources.
الدور: Manages Vault secrets, Keycloak OIDC clients, Grafana dashboards, Harbor config
OneDev
productionSelf-hosted Git repository manager with integrated CI/CD pipelines and code review.
الدور: Private Git hosting with container-based CI runners
Renovate
productionAutomated dependency update tool that keeps Helm charts, container images, and package versions current.
الدور: Continuous dependency updates via automated pull requests
Storage & Registry
Distributed block storage, S3-compatible object storage, and secure container registry.
Longhorn
productionCloud-native distributed block storage with 3-way replication, snapshots, and backups.
الدور: Primary storage class for all stateful workloads with automatic replication
Harbor
productionEnterprise container registry with vulnerability scanning, image signing, and RBAC.
الدور: Private registry with Trivy scanning, OIDC auth, and replication policies
Garage
productionS3-compatible distributed object storage designed for self-hosted deployments.
الدور: Cost-effective object storage for backups, logs, and unstructured data
RustFS
productionHigh-performance S3-compatible object storage written in Rust with WebUI console and OIDC SSO.
الدور: Primary S3 object storage with Keycloak SSO, NFS-backed persistence, and admin console
Velero
deployedKubernetes backup and disaster recovery tool with snapshot and restore capabilities.
الدور: Cluster-wide backup to S3 with scheduled policies
NFS CSI Driver
productionKubernetes CSI driver for NFS file shares with dynamic provisioning support.
الدور: NFS storage provisioner for shared file access across pods
Databases & Messaging
Managed PostgreSQL, Redis-compatible cache, distributed KV store, Kafka streaming, and multi-model databases.
CloudNativePG
productionKubernetes operator for PostgreSQL with HA clustering, automated failover, and point-in-time recovery.
الدور: Manages PostgreSQL clusters for 5+ applications (Keycloak, Paperless-ngx, Matomo, Honcho, n8n)
Dragonfly
productionRedis-compatible in-memory data store with superior performance through modern algorithms.
الدور: High-performance caching layer replacing Redis
Strimzi (Apache Kafka)
productionKubernetes operator for Apache Kafka with native CRD-based management.
الدور: Event streaming platform for asynchronous communication
TiKV
productionDistributed transactional key-value store with ACID transactions and Raft consensus.
الدور: Backend storage engine for SurrealDB with strong consistency
SurrealDB
productionMulti-model database supporting document, graph, and key-value data models.
الدور: Flexible database for applications needing graph + document queries
Qdrant
productionVector database for similarity search, powering semantic search and AI applications.
الدور: Vector embeddings store for AI/ML workloads
Application Platform
Developer portal, BaaS, workflow automation, analytics, and self-service tools.
Supabase
productionOpen-source Firebase alternative: PostgreSQL, auth, real-time, storage, and edge functions.
الدور: Backend-as-a-Service for rapid application development
n8n
productionSelf-hosted workflow automation with 400+ integrations and visual builder.
الدور: Event-driven automation for platform operations and notifications
Matomo
productionPrivacy-focused web analytics platform — self-hosted Google Analytics alternative.
الدور: Visitor tracking without third-party data sharing
Homepage
productionApplication dashboard providing a unified start page for all platform services.
الدور: Central dashboard linking all 30+ platform services
Paperless-ngx
productionDocument management system with AI-powered tagging, OCR, and full-text search.
الدور: Digitize, index, and archive documents with automatic classification
Firecrawl
productionAI-ready web data extraction platform that crawls and converts web pages to clean LLM-ready data.
الدور: Web scraping and data extraction for AI pipelines
Stirling-PDF
productionSelf-hosted PDF manipulation toolkit — merge, split, convert, compress, and OCR.
الدور: PDF processing utilities for document workflows
IT-Tools
productionCollection of handy developer utilities — encoders, converters, generators, and network tools.
الدور: Developer utility dashboard for day-to-day tasks
Honcho
productionAgent memory and state management for building context-aware AI applications.
الدور: Persistent memory layer for AI agent workflows
Mailpit
productionEmail testing tool that captures SMTP messages for development and QA environments.
الدور: Email sandbox for testing notification and transactional emails
Devtron
productionKubernetes application lifecycle management platform with CI/CD, debugging, and deployment automation.
الدور: Application delivery dashboard for Kubernetes workloads with OIDC SSO
Rclone
productionCloud storage sync and management tool supporting 70+ providers with WebUI.
الدور: File sync and backup between local storage and S3/cloud endpoints
AI & Machine Learning
Edge AI inference on NVIDIA DGX Spark with Blackwell GPU — LLM model serving via AIBrix and vLLM on bare-metal Kubernetes.
NVIDIA DGX Spark
productionDesktop AI supercomputer powered by Grace Blackwell GB10 Superchip — 1 PFLOP FP4, 128GB unified LPDDR5x memory, ARM64 architecture.
الدور: Dedicated GPU worker node (gx10) with Blackwell GPU, CUDA 13.0, and ConnectX-7 networking
AIBrix
productionOpen-source Kubernetes-native AI inference platform with prefix-cache-aware routing, LLM-specific autoscaling, and distributed KV cache.
الدور: LLM model serving control plane — 3-wave ArgoCD deployment with Envoy Gateway routing
vLLM
productionHigh-throughput LLM inference engine with PagedAttention, continuous batching, and OpenAI-compatible API.
الدور: Inference runtime serving Qwen, Llama, and Mistral models via NVIDIA NGC images on ARM64
NVIDIA GPU Operator
productionKubernetes operator automating GPU driver, container toolkit, device plugin, and DCGM exporter lifecycle.
الدور: GPU resource management with driver-less mode for DGX OS — exposes nvidia.com/gpu to scheduler
Hindsight
productionTemporal semantic memory system for AI agents — retain, recall, and reflect operations backed by pgvector similarity search.
الدور: Agent memory layer with GPU-accelerated local embeddings and reranking, powered by minimax LLM