Files
Sankofa/infrastructure
defiQUG 33d50fb91e
Some checks failed
API CI / API Lint (push) Successful in 47s
API CI / API Type Check (push) Failing after 47s
API CI / API Test (push) Successful in 1m0s
API CI / API Build (push) Failing after 50s
API CI / Build Docker Image (push) Has been skipped
Build Crossplane Provider / build (push) Failing after 5m51s
CD Pipeline / Deploy to Staging (push) Failing after 29s
CI Pipeline / Lint and Type Check (push) Failing after 36s
CI Pipeline / Build (push) Has been skipped
CI Pipeline / Test Backend (push) Failing after 1m33s
CI Pipeline / Test Frontend (push) Failing after 30s
CI Pipeline / Security Scan (push) Failing after 1m16s
Crossplane Provider CI / Go Test (push) Failing after 3m23s
Crossplane Provider CI / Go Lint (push) Failing after 7m27s
Crossplane Provider CI / Go Build (push) Failing after 3m27s
Deploy to Staging / Deploy to Staging (push) Failing after 30s
Portal CI / Portal Lint (push) Failing after 21s
Portal CI / Portal Type Check (push) Failing after 21s
Portal CI / Portal Test (push) Failing after 21s
Portal CI / Portal Build (push) Failing after 22s
Test Suite / frontend-tests (push) Failing after 30s
Test Suite / api-tests (push) Failing after 49s
Test Suite / blockchain-tests (push) Failing after 30s
Type Check / type-check (map[directory:. name:root]) (push) Failing after 23s
Type Check / type-check (map[directory:api name:api]) (push) Failing after 21s
Type Check / type-check (map[directory:portal name:portal]) (push) Failing after 19s
Validate Configuration Files / validate (push) Failing after 1m52s
CD Pipeline / Deploy to Production (push) Has been skipped
chore: consolidate local WIP (repo cleanup 20260707)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 09:41:34 -07:00
..

Infrastructure Management

Comprehensive infrastructure management for Sankofa Phoenix, including Proxmox VE, TP-Link Omada, network equipment, and other infrastructure components.

Overview

This directory contains all infrastructure management components for the Sankofa Phoenix platform, enabling unified management of:

  • Proxmox VE: Virtualization and compute infrastructure
  • TP-Link Omada: Network controller and access point management
  • Network Infrastructure: Switches, routers, VLANs, and network topology
  • Monitoring: Infrastructure monitoring, exporters, and dashboards
  • Inventory: Infrastructure discovery, tracking, and inventory management

Architecture

infrastructure/
├── proxmox/              # Proxmox VE management
│   ├── api/             # Proxmox API clients and utilities
│   ├── terraform/       # Terraform modules for Proxmox
│   ├── ansible/         # Ansible roles and playbooks
│   └── scripts/         # Proxmox management scripts
├── omada/               # TP-Link Omada management
│   ├── api/             # Omada API client library
│   ├── terraform/       # Terraform provider/modules
│   ├── ansible/         # Ansible roles for Omada
│   └── scripts/         # Omada management scripts
├── network/              # Network infrastructure
│   ├── switches/        # Switch configuration management
│   ├── routers/         # Router configuration management
│   └── vlans/           # VLAN management and tracking
├── monitoring/           # Infrastructure monitoring
│   ├── exporters/       # Custom Prometheus exporters
│   └── dashboards/      # Grafana dashboards
└── inventory/           # Infrastructure inventory
    ├── discovery/        # Auto-discovery scripts
    └── database/         # Inventory database schema

Components

Proxmox VE Management

The Proxmox management components integrate with the existing Crossplane provider (crossplane-provider-proxmox/) and provide additional tooling for:

  • Cluster management and monitoring
  • Storage pool management
  • Network bridge configuration
  • Backup and restore operations
  • Multi-site coordination

See: Proxmox Management

TP-Link Omada integration provides centralized management of:

  • Omada Controller configuration
  • Access point provisioning and management
  • Network policies and SSID management
  • Client device tracking
  • Network analytics and monitoring

See: Omada Management

Network Infrastructure

Network management components handle:

  • Switch configuration (VLANs, ports, trunking)
  • Router configuration (routing tables, BGP, OSPF)
  • Network topology discovery
  • Network policy enforcement

See: Network Management

Monitoring

Infrastructure monitoring includes:

  • Custom Prometheus exporters for infrastructure components
  • Grafana dashboards for visualization
  • Alerting rules for infrastructure health
  • Performance metrics collection

See: Monitoring

Inventory

Infrastructure inventory system provides:

  • Auto-discovery of infrastructure components
  • Centralized inventory database
  • Asset tracking and lifecycle management
  • Configuration drift detection

See: Inventory

Integration with Sankofa Phoenix

All infrastructure management components integrate with the Sankofa Phoenix control plane:

  • Crossplane: Infrastructure as Code via Crossplane providers
  • ArgoCD: GitOps deployment of infrastructure configurations
  • Kubernetes: Infrastructure management running on Kubernetes
  • API Gateway: Unified API for infrastructure operations
  • Portal: Web UI for infrastructure management

Usage

Quick Start

# Setup Proxmox management
cd infrastructure/proxmox
./scripts/setup-cluster.sh --site us-east-1

# Setup Omada management
cd infrastructure/omada
./scripts/setup-controller.sh --controller omada.sankofa.nexus

# Discover infrastructure
cd infrastructure/inventory
./discovery/discover-all.sh

Ansible Deployment

# Deploy infrastructure management to all sites
cd infrastructure
ansible-playbook -i inventory.yml deploy-infrastructure.yml

Terraform

# Provision infrastructure via Terraform
cd infrastructure/proxmox/terraform
terraform init
terraform plan
terraform apply

Configuration

Infrastructure management components use environment variables and configuration files:

  • Environment Variables: See ENV_EXAMPLES.md in project root
  • Secrets: Managed via Vault
  • Site Configuration: Per-site configuration in gitops/infrastructure/

Security

All infrastructure management follows security best practices:

  • API authentication via tokens and certificates
  • Secrets management via Vault
  • Network isolation via Cloudflare Tunnels
  • RBAC for all management operations
  • Audit logging for all changes

Contributing

When adding new infrastructure management components:

  1. Follow the directory structure conventions
  2. Include comprehensive README documentation
  3. Provide Ansible roles and Terraform modules
  4. Add monitoring exporters and dashboards
  5. Update inventory discovery scripts