Helve — Kubernetes workload dashboard

Helve — Kubernetes workload dashboard An architecture diagram generated by Archify. Users · Browser · Architecture component Users Browser Traefik · Ingress · TLS · Kubernetes cluster · MetalLB Traefik Ingress · TLS MetalLB Helve · Axum + Leptos/WASM · Kubernetes cluster · :3000 Helve Axum + Leptos/WASM :3000 Launched workloads · JupyterLab · RStudio · vLLM · Kubernetes cluster · ClusterIP Launched workloads JupyterLab · RStudio · vLLM ClusterIP cert-manager · ClusterIssuer internal-ca · Kubernetes cluster cert-manager ClusterIssuer internal-ca PostgreSQL · CloudNativePG :5432 · Kubernetes cluster PostgreSQL CloudNativePG :5432 Kubernetes API · namespace-scoped Role · Kubernetes cluster Kubernetes API namespace-scoped Role HTTPS Host routing reverse proxy SQL helve-tls created by Helve Kubernetes cluster Legend Backend Database Cloud Security External

Origin isolation

  • • Each app is served from <name>.proxy.<base>
  • • A separate origin keeps its JS away from /api/*

Control plane

  • • Namespace-scoped Role, never a ClusterRole
  • • Ownership enforced on every read and write

Quotas

  • • CPU, memory and GPU capped per user
  • • Summed from Deployment specs, not observed pods