mrcharles
8c76cf1bab
Planning documents for TSYS Group's COO→CTO handoff and AI agent
identity architecture. Shared publicly as a bootstrapping reference.
Includes: org prompts, transition map, agent identity bootstrap plan,
TechOps/K8s/SecOps context notes.
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
1.9 KiB
1.9 KiB
Prompt - k8s
(See VpTechOps and VpSecOps discourse categories introduction posts for vital organizational context )
vcluster
I want to utilize VCluster to slice up compute in a secure and scaleable manner. I have a variety of workloads , tenants and security requirements.
rancher
I need humans , AI agents to be able to work together on the clusters in a RBAC, OIDC SSO 2fa enforced , fully logged and audited way. Via cli , clickops , API . Rancher Platform seems to be the best way to do that.
- auth to OIDC/cloudron/keycloak.
- multi tenancy
- different security levels
- ITAR
- SCIF
Workloads
- RackRental (on demand network labs SAAS). Via container lab. This will have sub tenants who are franchisees with a revenue share agreement. They’ll provide compute / power / bandwidth , hook up to NetBird. This is the lowest confidentialliry environment, but the highest risk (essentially unknown counter parties (both the franchiseees (who probably aren’t hostile as they want to make money , but they may not be overly sophisticated operators ) and the customers (who we must presume are actively hostile and using the most advanced offensive cyber capabilities). As we are running essentially a horizontally scaled distributed cloud , it will be attacked by transnational criminal organizations looking to utilize it for large scale criminal operations.
- Suborbital Systems. Engineering workloads. Ranging from FLO (MorsePod , consumer electronics product which will be the entry point to the CommonsNet) to proprietary
- HFNOC
- HFNFC
- RWSCP
- TCTC (The Campus Trading Company).
- and RedWFO (RWSCP Family Office) . Workloads of these two entities are mission critical Highly sensitive and proprietary and can pre empt other workloads.
- Starting Line Productions .
- Rogue Technologies . They run a franchisee instance of RackRental and STLP. They provide compute / storage / network . They also have engineering workloads for customers.