openova/README.md
talent-mesh 0e6c347771 docs: add hierarchical grouping to platform components
- Organize 41 components into logical categories
- Split into Mandatory (Core Platform) and A La Carte sections
- Categories: Infrastructure, GitOps & IDP, Networking, Security,
  Policy, Observability, Scaling, Storage, Registry, Failover,
  Data, Identity, Communication, Monetization, AI/ML
- Underlying folder structure remains flat

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-08 16:08:24 +00:00

6.5 KiB

OpenOva

Enterprise-grade support provider for open-source Kubernetes ecosystems.

OpenOva provides a converged blueprint ecosystem with operational guarantees, enabling cloud-native transformation for enterprises.


Documentation

Document Description
Platform Tech Stack Technology stack and architecture
SRE Handbook Site reliability practices
Core Application Bootstrap + Lifecycle Manager

Repository Structure

openova/
├── core/                    # Bootstrap + Lifecycle Manager
├── platform/                # All 41 component blueprints (flat)
├── meta-platforms/          # Bundled vertical solutions
│   ├── ai-hub/              # Enterprise AI platform
│   └── open-banking/        # PSD2/FAPI fintech sandbox (+ 6 services)
└── docs/                    # Platform documentation

What We Provide

Offering Description
Converged Blueprints Production-ready K8s component bundles
Day-2 Operations Upgrades, security, SLA guarantees
Transformation Journey Cloud-native adoption partnership

Platform Architecture

Bootstrap Wizard → Customer's K8s + Backstage + Flux + Gitea
                 → OpenOva Blueprints (stays in picture)

Two-Phase Provisioning:

  • Bootstrap (Terraform): Initial cluster + core components
  • Lifecycle Manager (Crossplane): Day-2 operations + a la carte components

Platform Components (41)

All components under platform/ (flat structure):

Mandatory (Core Platform)

Infrastructure & Provisioning

Component Purpose
terraform Infrastructure as Code (bootstrap)
crossplane Day-2 cloud resource provisioning

GitOps & IDP

Component Purpose
flux GitOps configuration
gitea Self-hosted Git + CI/CD
backstage Internal Developer Platform

Networking

Component Purpose
cilium CNI + Service Mesh (eBPF, mTLS)
external-dns DNS synchronization
k8gb Global Server Load Balancing
stunner K8s-native TURN server

Security

Component Purpose
cert-manager TLS certificate automation
external-secrets Secrets management (ESO)
vault Secrets backend
trivy Security scanning

Policy

Component Purpose
kyverno Policy engine (validation, mutation, generation)

Observability

Component Purpose
grafana LGTM stack (Loki, Tempo, Mimir)

Scaling

Component Purpose
vpa Vertical Pod Autoscaler
keda Event-driven autoscaling

Storage

Component Purpose
minio S3-compatible object storage
velero Kubernetes backup

Registry

Component Purpose
harbor Container registry

Failover

Component Purpose
failover-controller Multi-region failover orchestration

A La Carte (Optional)

Data

Component Purpose
cnpg PostgreSQL operator
mongodb Document database
valkey Redis-compatible cache
redpanda Kafka-compatible streaming

Identity

Component Purpose
keycloak FAPI Authorization Server

Communication

Component Purpose
stalwart Self-hosted email server

Monetization

Component Purpose
openmeter Usage metering
lago Billing and invoicing

AI/ML

Component Purpose
knative Serverless platform
kserve Model serving
vllm LLM inference engine
milvus Vector database
neo4j Graph database
langserve LangChain RAG service
librechat Chat UI
n8n Workflow automation
searxng Privacy-respecting web search
bge Embeddings + reranking
llm-gateway Subscription proxy for Claude Code
anthropic-adapter OpenAI ↔ Anthropic translation

Meta-Platforms

Bundled vertical solutions that reference components from platform/:

AI Hub

Enterprise AI platform with LLM serving, RAG, and intelligent agents.

Uses: kserve, knative, vllm, milvus, neo4j, langserve, librechat, n8n, searxng, bge, llm-gateway, anthropic-adapter

See meta-platforms/ai-hub/

Open Banking

Fintech sandbox with PSD2/FAPI compliance.

Uses: keycloak, openmeter, lago + 6 custom services

See meta-platforms/open-banking/


Cloud Providers

Provider Status
Hetzner Cloud Available
Huawei Cloud Coming Soon
Oracle Cloud (OCI) Coming Soon

Getting Started

# Managed Bootstrap (recommended)
# Visit https://bootstrap.openova.io

# Self-Hosted Bootstrap
docker run -p 8080:8080 ghcr.io/openova-io/bootstrap:latest

Sync to Customer Gitea

This monorepo syncs to customer's multi-repo Gitea:

GitHub (monorepo)                    Customer Gitea (multi-repo)
─────────────────                    ──────────────────────────
openova/core/              ──sync──> openova-core/
openova/platform/cilium/   ──sync──> openova-cilium/
openova/platform/flux/     ──sync──> openova-flux/

Enterprise Kubernetes, delivered with GitOps