Applications¶
Everything Flux deploys, grouped by namespace. Each name links to its
directory in the repository. An app is enabled when its ks.yaml is listed in
the namespace kustomization.yaml.
Platform¶
kube-system¶
| App | Purpose |
|---|---|
| cilium | CNI, kube-proxy replacement, BGP LoadBalancer IPs |
| coredns | Cluster DNS |
| metrics-server | Resource metrics for kubectl top and HPAs |
flux-system¶
| App | Purpose |
|---|---|
| flux-instance | The Flux controllers, plus the GitHub webhook Receiver |
| flux-operator | Manages the Flux installation |
| konflate | Renders Flux changes in pull requests as status checks and comments |
network¶
| App | Purpose |
|---|---|
| certificates | Wildcard certificates for the gateways |
| cloudflare-tunnel | Cloudflare Tunnel to envoy-external |
| echo-server | Request echo for testing routing |
| envoy-gateway | Gateway API: envoy-internal and envoy-external |
| external-dns | UniFi (private) and Cloudflare (public) DNS records |
| tailscale-operator | Tailnet app connector and exit node |
cert-manager, external-secrets, security¶
| App | Purpose |
|---|---|
| authentik | Identity provider and SSO (OIDC) |
| cert-manager | ACME certificates via Cloudflare DNS-01 |
| external-secrets | Syncs secrets from 1Password |
| oidc-provider-debugger | Test client for OIDC flows |
| onepassword-connect | 1Password Connect server backing External Secrets |
rook-ceph¶
| App | Purpose |
|---|---|
| ceph-csi-drivers | Ceph CSI drivers for RBD volumes |
| rook-ceph | Rook operator and the Ceph cluster |
system¶
| App | Purpose |
|---|---|
| crd-schema-publisher | Publishes CRD JSON schemas to Cloudflare Pages (schemas.bykaj.io) for editor validation |
| descheduler | Rebalances pods across nodes |
| intel-gpu-resource-driver | DRA driver for the Intel iGPUs |
| k8tz | Injects the Europe/Amsterdam timezone into pods |
| kopiur | PVC backup and restore with the nas Kopia repository, replicated nightly to Backblaze B2 |
| openebs | openebs-hostpath local volumes |
| reflector | Mirrors Secrets and ConfigMaps across namespaces |
| reloader | Restarts workloads when their ConfigMaps or Secrets change |
| snapshot-controller | CSI VolumeSnapshot support |
| spegel | Peer-to-peer image mirror between nodes |
system-upgrade, actions-runner-system¶
| App | Purpose |
|---|---|
| actions-runner-controller | Self-hosted GitHub Actions runners |
| tuppr | Automated Talos and Kubernetes upgrades |
database¶
| App | Purpose |
|---|---|
| cloudnative-pg | PostgreSQL operator and Barman Cloud plugin |
| dragonfly | Dragonfly operator (Redis-compatible) |
| emqx | MQTT broker (operator and cluster) |
| meilisearch | Search engine |
observability¶
| App | Purpose |
|---|---|
| blackbox-exporter | Probes, including the NFS probe used by zeroscaler |
| drm-exporter | Intel GPU metrics |
| gatus | Status page and endpoint monitoring, auto-discovered from routes |
| goldilocks | Resource request recommendations |
| grafana-operator | Grafana and dashboards as CRDs |
| headlamp | Kubernetes web UI |
| kromgo | Cluster stats for the README badges |
| kube-prometheus-stack | Prometheus, Alertmanager and alerting rules |
| nut-exporter | UPS metrics |
| prometheus-adapter | Exposes Prometheus metrics to HPAs |
| silence-operator | Alertmanager silences as CRDs |
| unpoller | UniFi metrics |
| victoria-logs | Log storage and collection |
Workloads¶
media¶
| App | Purpose |
|---|---|
| audiobookshelf | Audiobooks and podcasts |
| immich | Photo and video library |
| jellyfin | Media server |
| plex | Media server, published externally |
| stash | Media organizer |
| tautulli | Plex statistics |
downloads¶
| App | Purpose |
|---|---|
| autobrr | Release automation |
| bazarr | Subtitles |
| configarr | Syncs TRaSH quality profiles into the *arrs |
| prowlarr | Indexer management |
| radarr | Movie management |
| sabnzbd | Usenet downloader |
| sonarr | TV series management |
| whisparr | Media management |
default¶
| App | Purpose |
|---|---|
| atuin | Shell history sync |
| changedetection | Website change monitoring |
| homepage | Dashboard |
| it-tools | Developer utilities |
| karakeep | Bookmarks and read-later |
| mail-archiver | Email archiving |
| paperless | Document management |
| pgadmin | PostgreSQL administration |
| spoolman | 3D printer filament inventory |
| thelounge | IRC client |
| wallos | Subscription tracking |
| wastebin | Pastebin |
| windshift | Jira-like project management |
Disabled¶
Manifests kept in the repository but commented out of their namespace
kustomization.yaml:
| Namespace | Apps |
|---|---|
ai |
litellm, llmkube, memini, open-webui |
default |
filabridge, n8n, opencloud |
development |
coder |
media |
komga |