portal

portal is the deployment artifact repository for the computing resources management layer described by the paper. It packages the automation and operational documentation needed to provision and maintain the HA k3s cluster, GPU worker nodes, Rancher, and the Tailscale/Flannel networking stack.

Scope

This repo is intentionally focused on deployment and operations:

• HA k3s control plane bootstrap
• GPU node join and NVIDIA runtime configuration
• Rancher installation and access
• Flannel/Tailscale recovery and verification workflows

The paper's data comes from service-workbench onboarding counts; it is not generated by experiment code in this repository.

Repository Layout

• cli/: cluster-ctl, a Rust terminal UI that drives the deployment (SSH directly to each node — no Ansible/Python runtime involved)
• infra/: plain Kubernetes manifests applied by hand with kubectl
• docs/: Tailwind + Three.js walkthrough of the install process, published to GitHub Pages (see docs/README.md)

Local Setup

1. Copy cli/cluster.example.toml to cluster.toml at the repo root and fill in your node names, Tailscale addresses/hostnames, and SSH user.

2. Put a working kubeconfig at config.yaml at the repo root if you want the "Verify Flannel" step to work (it shells out to kubectl).

3. Build and run:

   cd cli
   cargo run --release

   cluster-ctl tries your SSH keys (~/.ssh/id_ed25519, id_ecdsa, id_rsa) first; the startup screen lets you set a fallback SSH password and a sudo password for the session (kept in memory only, never written to disk).

4. Install kubectl locally if you plan to use the "Verify Flannel" step.

Main Commands

cluster-ctl presents each deployment step as a menu item:

• Deploy all
• Install k3s HA control plane
• Join GPU node(s)
• Configure NVIDIA runtime
• Restart k3s / Flannel recovery
• Install / upgrade Rancher
• Uninstall k3s from all masters (destructive, requires typed confirmation)
• Update Tailscale on all masters
• Test k3s API reachability
• Verify Flannel networking

See cli/README.md for details on cluster.toml and authentication.

License

This project is licensed under the MIT License.