# Apps

This catalogue contains Kubernetes-hosted applications. Shared platform
capabilities such as observability and storage are documented under
[Platform layers](layers.md), while Kasten is documented as one component of
the [Backup and recovery](backup.md) subsystem.

## Platform integration overview

The overview keeps Kubernetes as the system boundary and shows how applications
consume shared control, observability, storage, and backup capabilities.

<a class="archify-open"
   href="../_static/archify/kubernetes/platform/integration-overview.html"
   target="_blank" rel="noopener">Open the interactive platform integration overview</a>

<iframe
  class="archify-frame archify-frame--architecture"
  src="../_static/archify/kubernetes/platform/integration-overview.html"
  title="Kubernetes platform integration overview"
  loading="lazy"
  allowfullscreen>
</iframe>

## Argo CD

The production GitOps architecture view describes how Argo CD manages itself
and the Kubernetes application fleet. It covers operator access, ingress,
LDAP-backed identity and RBAC, GitLab configuration and application sources,
Vault-backed secrets, and reconciliation into the production and staging
clusters.

<a class="archify-open"
   href="../_static/archify/kubernetes/apps/argocd/production-gitops-architecture.html"
   target="_blank" rel="noopener">Open the interactive production GitOps architecture</a>

<iframe
  class="archify-frame archify-frame--architecture"
  src="../_static/archify/kubernetes/apps/argocd/production-gitops-architecture.html"
  title="Argo CD production GitOps architecture"
  loading="lazy"
  allowfullscreen>
</iframe>

The diagram presents the intended production architecture and its principal
integrations. It is an architectural overview rather than a live-cluster
status view.

## AWX

The AWX production view documents the user access path, operator-managed web
and task tiers, LDAP and Vault integration, the three-instance CloudNativePG
database, shared projects storage, Prometheus metrics, and backup integration.

<a class="archify-open"
   href="../_static/archify/kubernetes/apps/awx/production-architecture.html"
   target="_blank" rel="noopener">Open the interactive AWX production architecture</a>

<iframe
  class="archify-frame archify-frame--architecture"
  src="../_static/archify/kubernetes/apps/awx/production-architecture.html"
  title="AWX production architecture"
  loading="lazy"
  allowfullscreen>
</iframe>

The diagram presents the intended production architecture, including the
high-availability deployment model. It is an architectural overview rather
than a live-cluster status view.

## Neutro

The Neutro production view documents the ESS user path through ingress and
OpenID Connect, the Open WebUI and LiteLLM application tiers, Azure OpenAI,
shared PostgreSQL, Redis and NFS state, Vault-backed runtime secrets, and the
observability integration. Argo CD deploys the production overlay into the
`neutro` namespace.

<a class="archify-open"
   href="../_static/archify/kubernetes/apps/neutro/production-architecture.html"
   target="_blank" rel="noopener">Open the interactive Neutro production architecture</a>

<iframe
  class="archify-frame archify-frame--architecture"
  src="../_static/archify/kubernetes/apps/neutro/production-architecture.html"
  title="Neutro production architecture"
  loading="lazy"
  allowfullscreen>
</iframe>

The diagram presents the intended production architecture and its platform
integrations. It is an architectural overview rather than a live-cluster
status view.