# Kubexa

> A modern baremetal platform on Talos Linux, converged entirely from git: Flux CD, OpenTofu, Gateway API, OpenBao, ZITADEL. Documentation written against the manifests that run it.

Contact: hello@kubexa.tech for questions and corrections, security@kubexa.tech for vulnerability reports. https://kubexa.tech/.well-known/security.txt documents the disclosure path.

Pages below exist as HTML and as raw Markdown (append `.md`).

## Talos Linux

- [Node images and upgrades](https://kubexa.tech/docs/talos/node-images.md): What a node is made of, where the machine config lives, and how an upgrade reaches four machines without an operator watching.

## Hardware

- [The four machines](https://kubexa.tech/docs/hardware/nodes.md): CPU, memory, GPU and role for every node, from the capacity the API server reports.

## GitOps

- [How an application is deployed](https://kubexa.tech/docs/gitops/deploying-an-app.md): One HelmRelease, a chart from helmforge, a floating image tag, and the pipeline that builds the image.

## Network

- [Gateway routes and DNS](https://kubexa.tech/docs/network/gateway-routing.md): Two Cilium Gateways, one wildcard certificate, and external-dns reading hostnames from HTTPRoute objects.

## Storage

- [Ceph and PostgreSQL](https://kubexa.tech/docs/storage/replicated-state.md): Storage classes, replication factor, the CNPG cluster shape, and where the backups go.

## Monitoring

- [Monitoring stack](https://kubexa.tech/docs/observability/monitoring-stack.md): What is collected, where it lands, which alerts exist, and how to read them.

## AI stack

- [Agent sandboxes and MCP](https://kubexa.tech/docs/ai/agents-as-workloads.md): Agent devboxes as Kubernetes Sandboxes behind a gateway, and the MCP servers exposed to them. Partial by design.

## Open source projects

- [kaniko and OSS Container Tools](https://kubexa.tech/docs/oss/osscontainertools.md): kaniko builds every image here without a Docker daemon. Google archived it in 2024; a group of maintainers took it over.
- [helmforge charts](https://kubexa.tech/docs/oss/helmforge.md): The chart repository behind most applications here, including the generic chart that covers anything without an upstream chart.
- [Home-ops community](https://kubexa.tech/docs/oss/home-ops.md): The homelab GitOps repositories whose layout this one follows, and where it deliberately differs.

## Writing

- [Rust it up](https://kubexa.tech/blog/2026-10-30-rust-it-up.md): Everyone rewrites in Rust now, from Bun's own runtime to Cloudflare's proxy and the Windows kernel. What the pattern is, why it keeps working, and what we are building in Rust here.
- [Nine months to a boring platform](https://kubexa.tech/blog/2026-10-29-boring-platform.md): The real timeline of this repository, from hand-built VMs on one host to Flux, KubeSpan, and the outage that deleted every namespace.

## Timeline

- [How this cluster got built](https://kubexa.tech/timeline.md): every milestone with the date and the commit that made it true.
- [Live from the cluster](https://kubexa.tech/status.md): the Grafana status dashboard, embedded.