A connected personal fleet: RKE2 applications on xpve, LXD containers on x1, RF radar on x2, and field compute on x3. Live hardware telemetry, SQL history and WireGuard mesh networking.
Temperature: every 5 minutes · CPU / RAM: every 10 minutes · Storage: every 12 hours.
RKE2 Control Plane (VM 101 @ xpve / Host x) · x1 LXD / LXC Edge Host · x2 RF Radar / Scanner · x3 Field Compute / Disaster Recovery · ec2 Cloud Gateway
rke2-master · Ready: True
| Namespace | Pod | Actual node | Phase / Ready |
|---|---|---|---|
| compliance-scanner | compliance-postgres-0 | rke2-master | Running / Yes |
| dns | pihole-857dc5c47d-9nnq8 | rke2-master | Running / Yes |
| headlamp | headlamp-84db58c696-4hmlq | rke2-master | Running / Yes |
| industrial-apps | adminer-app-7d8788d5df-6qksx | rke2-master | Running / Yes |
| industrial-apps | grafana-6f9c4f8746-s699p | rke2-master | Running / Yes |
| industrial-apps | ignition-dev-0 | rke2-master | Running / Yes |
| industrial-apps | ignition-eam-0 | rke2-master | Running / Yes |
| industrial-apps | ignition-prod-backup-0 | rke2-master | Running / Yes |
| industrial-apps | ignition-prod-master-0 | rke2-master | Running / Yes |
| industrial-apps | jupyter-lab-579898675c-hp48t | rke2-master | Running / Yes |
| industrial-apps | net-asset-discovery-64496d9b4-g7lk2 | rke2-master | Running / Yes |
| industrial-apps | postgres-db-59566648f5-qd79n | rke2-master | Running / Yes |
| industrial-apps | web-server-68577c65cf-gbd6q | rke2-master | Running / Yes |
| industrial-iot | emqx-86d48fd994-qmbkn | rke2-master | Running / Yes |
| industrial-iot | influxdb-645dd6fb9f-c7jc8 | rke2-master | Running / Yes |
| industrial-iot | neuron-59fbd5664b-q2tlp | rke2-master | Running / Yes |
| industrial-iot | node-red-5bb45f8774-z9fwt | rke2-master | Running / Yes |
| industrial-iot | rabbitmq-5546cff59b-zn5dn | rke2-master | Running / Yes |
| industrial-iot | telegraf-9ddf5c769-lb9dk | rke2-master | Running / Yes |
| industrial | gitea-server-74bbd98886-zn9fj | rke2-master | Running / Yes |
| industrial | openplc-runtime-6465d45cc8-fslqz | rke2-master | Running / Yes |
| industrial | telegraf-uns-5b86fb4cbc-krd8h | rke2-master | Running / Yes |
| kube-system | cloud-controller-manager-rke2-master | rke2-master | Running / Yes |
| kube-system | etcd-rke2-master | rke2-master | Running / Yes |
| kube-system | helm-install-rke2-canal-78k9z | rke2-master | Succeeded / No |
| kube-system | helm-install-rke2-coredns-9fj76 | rke2-master | Succeeded / No |
| kube-system | helm-install-rke2-metrics-server-5rlmt | rke2-master | Succeeded / No |
| kube-system | helm-install-rke2-runtimeclasses-95b4d | rke2-master | Succeeded / No |
| kube-system | helm-install-rke2-snapshot-controller-45crl | rke2-master | Succeeded / No |
| kube-system | helm-install-rke2-snapshot-controller-crd-6w78m | rke2-master | Succeeded / No |
| kube-system | helm-install-rke2-traefik-crd-229pz | rke2-master | Succeeded / No |
| kube-system | helm-install-rke2-traefik-n7qvz | rke2-master | Succeeded / No |
| kube-system | kube-apiserver-rke2-master | rke2-master | Running / Yes |
| kube-system | kube-controller-manager-rke2-master | rke2-master | Running / Yes |
| kube-system | kube-proxy-rke2-master | rke2-master | Running / Yes |
| kube-system | kube-scheduler-rke2-master | rke2-master | Running / Yes |
| kube-system | mattermost-static-rke2-master | rke2-master | Running / Yes |
| kube-system | rke2-canal-zhr85 | rke2-master | Running / Yes |
| kube-system | rke2-coredns-rke2-coredns-747b86f67b-8v7pv | rke2-master | Running / Yes |
| kube-system | rke2-coredns-rke2-coredns-autoscaler-878589fc9-8cchx | rke2-master | Running / Yes |
| kube-system | rke2-metrics-server-956b4b7f5-ptb94 | rke2-master | Running / Yes |
| kube-system | rke2-snapshot-controller-5574cc88bf-jw9hg | rke2-master | Running / Yes |
| kube-system | rke2-traefik-vlcl7 | rke2-master | Running / Yes |
| mattermost | mattermost-app-68f97f5745-7mfd4 | rke2-master | Running / Yes |
| ot-security | otsec-dashboard-6b54cd667-sl678 | rke2-master | Running / Yes |
| ot-security | suricata-ids-7646db8ddd-wqmgw | rke2-master | Running / Yes |
| portainer | portainer-789484dc7-98q67 | rke2-master | Running / Yes |
| storage | nfs-client-provisioner-89cb77789-j27zp | rke2-master | Running / Yes |
xpve host, LXC filesystems and RKE2 VM disk utilization · refreshed every 12 hours. Virtual disk allocation is shown separately from measured filesystem usage.
Collector status records shown above. External log viewer and InfluxDB expose their own application data.
Services grouped by category, with device and environment filters. Runtime placement is verified where inventory is available; RKE2 routes are configured targets until the API is reachable.
PostgreSQL · Runtime: x-db. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Mosquitto MQTT broker; see the connection guide for client access.
RabbitMQ · Runtime: x-rabbitmq. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Ignition · Runtime: x-ignition. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Ignition SCADA · Runtime: lxc-scada. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Ignition MES · Runtime: lxc-mes. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
InfluxDB · Runtime: lxc-influx. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
PostgreSQL TCP database; see the connection guide for client access.
RabbitMQ · Runtime: lxc-rabbitmq. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Mosquitto MQTT broker; see the connection guide for client access.
Primary Ignition 8.1 Industrial Automation Gateway. High-availability plant execution controller with real-time tag engine and database connectivity.
Redundant warm-standby Ignition gateway. Real-time state replication and instant failover protection for mission-critical automation.
Engineering development and validation gateway for designing automation logic, testing Python modules, and rapid prototyping.
Enterprise Administration Module (EAM) Controller. Centralized management of gateway agents, project distributions, and remote tasks.
Complete IEC 61131-3 soft programmable logic controller runtime. Executes Structured Text (ST) and Ladder Diagram (LD) programs with Modbus TCP server.
Self-hosted Git version control system. Hosts PLC project files, Ignition gateway backups, automation scripts, and CI/CD pipelines.
RKE2 dashboard for cluster nodes and workload placement. The RKE2 API is available; public ingress runs on ec2.
High-velocity time-series sensor historian. Stores continuous plant floor telemetry, soft PLC process variables, and environmental metrics.
Unified operational observability dashboards. Real-time telemetry visualization, node hardware metrics, alerting rules, and process trends.
High-performance distributed MQTT broker powering the Unified Namespace (UNS). Supports millions of messages with Sparkplug B edge specifications.
Low-code visual event wiring tool. Seamlessly bridges Modbus registers, MQTT UNS topics, REST webhooks, and automation logic.
Self-hosted encrypted operator messaging and C2 alerts channel. Includes the official public xk3s community hub and automated Kubernetes webhooks.
Cluster-wide zero-trust DNS filtering and query sinkhole. Blocks tracking, telemetry leakage, and unwanted network connections.
Container orchestration and image lifecycle manager. Provides container stack deployments, volume monitoring, and log inspection.
Robust distributed AMQP message broker for asynchronous plant floor event queues, reliable message buffering, and service pub/sub.
Application host: RKE2 VM 101 on xpve. Data source: RKE2 PostgreSQL ignition_db. Public ingress: ec2.
Application host: RKE2 VM 101 on xpve. Data source: RKE2 PostgreSQL ignition_db. Public ingress: ec2.
Application host: RKE2 VM 101 on xpve. Data source: RKE2 PostgreSQL ignition_db. Public ingress: ec2.
Public-source entity listings, forced-labor goods and agency coverage. Dedicated RKE2 PostgreSQL database: compliance_scanner. Passphrase required.
Industrial edge connectivity gateway. Converts Modbus, OPC UA, Siemens, and fieldbus protocols directly into MQTT / Sparkplug B for the Unified Namespace.
Interactive data science workspace. Preloaded with Python kernels, Pandas, InfluxDB clients, and automated SCADA analytics notebooks.
Lightweight SQL management interface. Direct visual access to the fleet PostgreSQL instance (ignition_db), telemetry schemas, and transaction tables.
Application host: RKE2 VM 101 on xpve. Data source: RKE2 PostgreSQL ignition_db. Public ingress: ec2.
Application host: ec2. Authenticated fleet status, operator intelligence and service directory.
Field RF radar and scanner portal for x2. ADS-B radar, receiver graphs, and SDR controls through the authenticated radar gateway.
Node-RED with OPC UA client/server nodes. Encrypted OPC UA on the private mesh; authenticated web editor. PLC mappings are not configured.
Personal Fleet: RKE2 control plane in xpve VM 101; x1 LXD Edge Host for VMs and LXC; x2 Field RF Radar & Scanner Node; x3 Compute & Engineering Station; ec2 cloud ingress. Device and guest telemetry is measured independently.
ssh xpve (Mutual Ed25519 Key Auth) • Trusted Multi-SAN SSL
turn-off-backlight.service. No bleed, lower power, cooler thermals.:8006 • Terminal via ssh xpve. Zero peripherals required.
