Gough

Helm-Deployed Services

Gough’s own backend services ship as one Helm chart per service, deployable independently of gough cluster create for GitOps pipelines.

  • Charts: api-manager (REST :8080, gRPC :50051), worker-ipxe (DHCP/TFTP boot orchestration), discovery-agent (packaging for the PXE initrd agent), access-agent (reverse-SSH), and webui.
  • Deployed into a gough namespace — never environment-suffixed; the environment lives in the values file.
  • Images are pulled from ghcr.io/penguintechinc/gough/<service>, pinned to an immutable tag or digest for any environment beyond alpha.
  • api-manager’s OIDC signing key is provisioned once and shared across replicas via a Kubernetes Secret (Vault/External Secrets Operator preferred), since every replica both issues and validates tokens.

← Back to all features

Full technical documentation →