Phase 4: Kubernetes¶
The cluster and the add-ons every service above it assumes. Install in this order — cert-manager before ingress so routes can reference their certificates, storage before anything stateful.
- Cluster - control plane and workers with k0sctl
- Cluster resources - generated configuration, secrets, and manifests
- cert-manager - TLS issuance, including the VICE wildcard
- Ingress - HAProxy, Traefik, and the legacy ingress-nginx path
- Storage - persistent volumes with Longhorn or OpenEBS
- Harbor - the container registry
- Argo Workflows - batch analysis execution