Infra Services
The infra-service repo contains some services and service configurations for
supporting platform development and engineering. The services are deployed to a
mixed runtime environment including Kubernetes and Google Cloud Run.
Services on Kubernetes
We have one K8s cluster for infra manamgent, this is a GKE Autopilot cluster. The
only limitations on this cluster are that containers/pods cannot run in privileged
mode. Which is fine as a matter of principle we don’t run anything in privileged
mode in any case. So if a product or service cannot run without privileged mode
or it has sojme kind of side car that wants CAPABILITIES or sysctl then an alternative
should be found.
The cluster project is tb-infra-mgmt-gke-prod-uk, running in the europe-west2
region. This is a zonal cluster. The region europe-west2 is London and this was
chosen specifically to be outwith the EU. It doesn’t contain any data that is required
to be in the EU howver in the event of an outage in the EU platform region the cluster
will still be available.
Clusters
| Name | Description | Project | Region |
|---|---|---|---|
| infra-management | For supporting infra development | tb-infra-mgmt-gke-prod-uk | europe-west2 |
Cluster Services
| Service | Description | Cluster | Namespace |
|---|---|---|---|
| ArgoCD | Continuous Deployment | infra-management | argocd |
| Argo Events | events/workflows | infra-management | argo-events |
| Argo Workflows | workflows | infra-management | argo |
| Atlantis | Terraform Collaboration | infra-management | atlantis |
| Emissary Ingress | API Gateway | infra-management | emissary |
| Tailscale Operator | Tailscale Operator | infra-management | tailscale |
| Dex | Identity Provider | infra-management | dex |
| Cert Manager | Certificate Management | infra-management | cert-manager |
Cloud Run Services
Cloud run services are mostly all deployed to support the Titanbay platform
| Service | Description | Project | Region |
|---|---|---|---|
| Tyk API Gateway | API Gateway | engi-vpc-*-eu | europe-west2 |
| tykctl | OpenAPI & Tyk Management API | engi-vpc-*-eu | europe-west2 |