Commit Graph
19 Commits
Author SHA1 Message Date
nutcas3 f071605a47 feat: Add Kubernetes deployment documentation and HashiCorp Vault installation with TLS configuration
- Add README.md with architecture overview covering api-server (3 replicas), charging-engine (2 replicas), packet-gateway (2 replicas), web-dashboard (2 replicas), postgres, redis, monitoring stack (Prometheus, Grafana, InfluxDB, Alertmanager)
- Add prerequisites section with kubectl/Docker/Helm requirements, Kubernetes 1.25+, 4 CPU/8GB RAM minimum, 50GB+ storage
- Add quick start guide with deployment
2026-04-17 17:26:22 +03:00
nutcas3 a0c862a1a4 feat: Add Kubernetes manifests for telecom platform applications and configuration
- Add api-server Deployment with 3 replicas, 8000 HTTP and 9090 metrics ports, database/Redis/InfluxDB environment configuration, 256Mi-512Mi memory, 250m-500m CPU, health probes
- Add charging-engine Deployment with 2 replicas, 3001 port, Redis integration, 128Mi-256Mi memory, 100m-200m CPU
- Add packet-gateway Deployment with 2 replicas, 9000 metrics port, privileged security context with NET_ADMIN/SYS_ADMIN capabilities
2026-04-17 17:26:00 +03:00
nutcas3 7a2715f44e feat: Add comprehensive deployment guide with installation steps, multi-environment configuration, and operational procedures
- Add README.md with architecture overview covering core platform services (API, charging, packet gateway, dashboard) and infrastructure components (GitOps, Istio, monitoring, ELK, Velero, Vault, cert-manager, GDPR, autoscaling)
- Add prerequisites section with Kubernetes 1.24+ requirements, 8 CPU/32GB RAM minimum, required tools (kubectl, helm, argocd, vault), external dependencies (S3, domains, email)
- Add installation steps for Istio service mesh, cert-manager, HashiCorp Vault, ELK stack, Velero
2026-04-17 17:23:49 +03:00
nutcas3 105906b901 feat: Add Istio service mesh installation with ingress gateway, traffic management, and mTLS configuration
- Add IstioOperator with default profile, pilot with 100% trace sampling, istio-system namespace
- Add ingress gateway with LoadBalancer type, HTTP (80) and HTTPS (443) ports, 100m-500m CPU, 128Mi-512Mi memory, 1-5 autoscale replicas
- Add egress gateway with 50m-200m CPU, 64Mi-256Mi memory
- Add mesh config with ROUND_ROBIN load balancing, 100 max TCP connections, 50 HTTP pending requests, JSON
2026-04-17 17:23:13 +03:00
nutcas3 c43f6f8ce8 feat: Add Helm chart for telecom platform with dependencies and comprehensive configuration
- Add Chart.yaml with telecom-platform v1.0.0, MIT license, infrastructure category
- Add chart dependencies: postgresql 12.1.9, redis 17.3.7, prometheus 23.1.0, grafana 6.58.9, elasticsearch 19.5.0, kibana 10.2.0, logstash 8.5.1
- Add values.yaml with global configuration for imageRegistry, imagePullSecrets, storageClass, environment
- Add platform configuration for api-server (3-10 replicas, 8000 port), charging-engine (2-8 replicas, 8080 port), packet-gateway (2-6 replicas, 9090 port), web-dashboard (2-4 replicas, 3000
2026-04-17 17:22:47 +03:00
nutcas3 325391e0c8 feat: Add GDPR compliance service with data retention, encryption, and automated cleanup
- Add gdpr-compliance-config ConfigMap with retention policies: 30d logs, 90d metrics, 365d audit, 7y billing, 5y personal data, 3y consent
- Add privacy configuration with AES-256-GCM encryption, 90d key rotation, hash-based anonymization for phone/email/name/address
- Add consent management with age verification and 30d withdrawal period
- Add audit logging for access, modifications, and exports with 365d retention
- Add data subject rights support
2026-04-17 17:22:32 +03:00
nutcas3 940830674d feat: Add Kustomize environment configurations for dev, staging, and prod deployments
- Add dev kustomization with debug logging, 100 req/min rate limit, single replica counts
- Add staging kustomization with info logging, 500 req/min rate limit, 2 replicas, metrics enabled
- Add prod kustomization with warn logging, 1000 req/min rate limit, 2-3 replicas, GDPR/audit enabled
- Add environment-specific configMapGenerator with LOG_LEVEL, ENVIRONMENT, RATE_LIMIT settings
- Add environment-specific secretGenerator with DATABASE_URL, REDIS_URL, JWT_SECRET, encryption key (prod
2026-04-17 17:22:20 +03:00
nutcas3 9034337524 feat: Add ELK stack deployment with Elasticsearch cluster, Kibana UI, and Logstash pipeline for telecom platform logging
- Add elasticsearch namespace with logging component labels and telecom-platform integration
- Add Elasticsearch StatefulSet with 3 master node replicas, cluster name telecom-platform-logs
- Add initContainers for vm.max_map_count and file descriptor limit configuration with privileged security context
- Add Elasticsearch 8.10.0 container with 9200 REST and 9300 inter-node ports, 1Gi-2
2026-04-17 17:21:44 +03:00
nutcas3 7e0e5b619f feat: Add cert-manager installation with ClusterIssuers and TLS certificates for telecom platform
- Add cert-manager namespace with certificates component labels and telecom-platform integration
- Add cert-manager ServiceAccount with RBAC ClusterRole for secrets, ingresses, certificates, issuers, ACME challenges
- Add ClusterRoleBinding associating cert-manager ServiceAccount with ClusterRole
- Add cert-manager Deployment with v1.12.0 controller image, metrics port 9402, default issuer telecom-platform-ca
- Add cert-manager Service expos
2026-04-17 17:21:13 +03:00
nutcas3 cb052639ee feat: Add Velero backup configuration with daily and weekly schedules for telecom platform
- Add velero namespace with backup component labels and telecom-platform integration
- Add velero ServiceAccount with RBAC ClusterRole granting full cluster access
- Add ClusterRoleBinding associating velero ServiceAccount with ClusterRole
- Add velero-aws-credentials Secret with placeholder AWS access key and secret key
- Add BackupStorageLocation using AWS provider with telecom-platform-backups bucket in us-east-1
- Add VolumeSnapshotLocation using AWS provider in us-east-1
2026-04-17 17:20:36 +03:00
nutcas3 2b2818a412 feat: Add HPA and VPA autoscaling configurations for telecom platform components
- Add api-server HPA with 2-10 replicas scaling on CPU (70%), memory (80%), HTTP requests (100/s), queue messages (1000)
- Add charging-engine HPA with 2-8 replicas scaling on CPU (75%), memory (85%), billing events (50/s)
- Add packet-gateway HPA with 2-12 replicas scaling on CPU (60%), memory (75%), packets (1000/s)
- Add web-dashboard HPA with 1-6 replicas scaling on CPU (70%), memory (80%), active sessions (50)
- Configure H
2026-04-17 17:20:15 +03:00
nutcas3 44ce95a9e9 feat: Add ArgoCD applications for multi-environment telecom platform deployment
- Add telecom-platform Application for base platform deployment to telecom-platform namespace
- Add telecom-platform-dev Application with automated sync, pruning, and self-healing enabled
- Add telecom-platform-staging Application with automated sync, pruning, and self-healing enabled
- Add telecom-platform-prod Application with manual sync (prune and selfHeal disabled) for production safety
- Configure dev and staging with 5
2026-04-17 17:19:35 +03:00
nutcas3 2ee6fa49fd feat: Add ArgoCD operator installation manifests with OIDC authentication and namespace configuration
- Add ArgoCD custom resource with server route enabled and annotation-based resource tracking
- Configure Dex SSO provider with OIDC connector for OpenID Connect authentication
- Add OIDC client configuration with openid, profile, email, groups scopes
- Add argocd-secret with placeholder for OIDC client secret
- Add argocd namespace with telecom-platform labels and gitops component annotation
- Configure namespace with gitops managed-by annotation for platform integration
2026-04-17 17:19:06 +03:00
nutcas3 f0da1abcef feat: Add ArgoCD app-of-apps pattern for GitOps deployment automation
- Add telecom-platform-root Application manifest with automated sync policy
- Configure source repository pointing to deployments/argocd/apps directory on main branch
- Enable automated pruning and self-healing for continuous reconciliation
- Add CreateNamespace and PrunePropagationPolicy=foreground sync options
- Configure retry policy with 5 attempts, exponential backoff from 5s to 3m
- Set destination to default Kubernetes cluster
2026-04-17 17:17:48 +03:00
nutcas3 069a1a6c07 feat: Add free5GC configuration files for AUSF, NSSF, PCF, SMF, UDM, UDR, and UPF
- Add AUSF configuration with nausf-auth service endpoint
- Add NSSF configuration with nnssf-nsselection service endpoint
- Add PCF configuration with npolicy-authorization service endpoint
- Add SMF configuration with dual DNN support (internet, internet2), PFCP settings, and IPv4 session pools
- Add UDM configuration with nudm-sdm, nudm-uecm, and nudm-ueau service endpoints
- Add UDR configuration with nudr-dr service endpoint
2026-04-14 03:08:55 +03:00
nutcas3 02720e2dff feat: Add iptables configuration script for free5GC UPF
- Add shell script to configure UPF (User Plane Function) iptables rules
- Flush existing filter, nat, and mangle tables
- Configure NAT masquerading on eth0 interface
- Set up forwarding rules for uesimtun0 tunnel interface
- Enable bidirectional traffic flow between UE tunnel and external network
2026-04-14 02:58:24 +03:00
nutcas3 868458d35d feat: Add free5GC NRF configuration for network function registration
- Add NRF (Network Repository Function) configuration
- Configure SBI interface with service binding on port 8000
- Set PLMN identity (MCC: 208, MNC: 93) for France
- Configure slice type (SST: 1) and slice differentiator
- Add MongoDB integration for NRF data storage
- Set T3502 timer to 60 seconds
2026-04-14 02:58:15 +03:00
nutcas3 f26e68849a feat: Add free5GC AMF configuration for 5G core network
- Add AMF (Access and Mobility Management Function) configuration
- Configure NGAP and SBI interfaces with service bindings
- Set PLMN identity (MCC: 208, MNC: 93) and TAI list
- Configure security algorithms (integrity: NIA2/NIA1/NIA0, ciphering: NEA0/NEA1/NEA2)
- Add NRF integration and service registration settings
- Configure namf-comm and namf-evts service endpoints
2026-04-14 02:55:19 +03:00
nutcas3 4dda7e25d8 feat: Add deployment infrastructure and documentation
Docker:
- Add production-ready Dockerfiles for all microservices
- Optimize for multi-stage builds and minimal image sizes

Kubernetes:
- Add namespace and service manifests
- Include MongoDB and Redis deployment configurations
- Configure API server and charging engine deployments

Documentation:
- Add comprehensive README with platform overview
- Include technology stack and quick start instructions
- Provide prerequisites and setup guidance
2026-04-03 19:56:33 +03:00