TazLab K8s Configs

Scope

This page covers the configuration layer in the active tazlab-k8s Flux graph.

Current Synthesis

The configs layer is where cluster-wide secrets and static configuration are prepared before later layers consume them.

Covered Objects

  • cert-manager configuration and wildcard TLS support
  • tazlab-db backup and bootstrap secrets
  • Dex configuration and secret material
  • ai-agents configuration required by downstream agent workloads
  • GitHub external secret used by Flux image automation

Why It Matters

This layer is the bridge between the infrastructure that exists and the workloads that can safely consume it. It is also where the current Infisical-backed secret flow is still visible in the live cluster.

Relationships

Source Basis

  • tazlab-k8s/clusters/tazlab-k8s/infrastructure-configs.yaml
  • tazlab-k8s/infrastructure/configs/*
  • tazlab-k8s/infrastructure/operators/monitoring/flux-secret-sync.yaml