Infra Services

The infra-service repo contains some services and service configurations for supporting platform development and engineering. The services are deployed to a mixed runtime environment including Kubernetes and Google Cloud Run.

Services on Kubernetes

We have one K8s cluster for infra manamgent, this is a GKE Autopilot cluster. The only limitations on this cluster are that containers/pods cannot run in privileged mode. Which is fine as a matter of principle we don’t run anything in privileged mode in any case. So if a product or service cannot run without privileged mode or it has sojme kind of side car that wants CAPABILITIES or sysctl then an alternative should be found.

The cluster project is tb-infra-mgmt-gke-prod-uk, running in the europe-west2 region. This is a zonal cluster. The region europe-west2 is London and this was chosen specifically to be outwith the EU. It doesn’t contain any data that is required to be in the EU howver in the event of an outage in the EU platform region the cluster will still be available.

Clusters

NameDescriptionProjectRegion
infra-managementFor supporting infra developmenttb-infra-mgmt-gke-prod-ukeurope-west2

Cluster Services

ServiceDescriptionClusterNamespace
ArgoCDContinuous Deploymentinfra-managementargocd
Argo Eventsevents/workflowsinfra-managementargo-events
Argo Workflowsworkflowsinfra-managementargo
AtlantisTerraform Collaborationinfra-managementatlantis
Emissary IngressAPI Gatewayinfra-managementemissary
Tailscale OperatorTailscale Operatorinfra-managementtailscale
DexIdentity Providerinfra-managementdex
Cert ManagerCertificate Managementinfra-managementcert-manager

Cloud Run Services

Cloud run services are mostly all deployed to support the Titanbay platform

ServiceDescriptionProjectRegion
Tyk API GatewayAPI Gatewayengi-vpc-*-eueurope-west2
tykctlOpenAPI & Tyk Management APIengi-vpc-*-eueurope-west2