C4 Level 3 — Components¶
Zoom into each container of the Level 2: internal components, technologies, and relationships. For the physical node map, continue to Level 4 — Deployment.
Return to Overview (Levels 1–2).
3.1 — K3s Management¶
Breakdown of the bare-metal control cluster: GitOps (Argo CD), identity (Dex), provisioning CAPI/CAPN, service network (MetalLB, Gateway), storage operators (OpenEBS, Longhorn), secrets (Sealed Secrets), upgrades (SUC), and optional vCluster Platform.
Operational details: Technology Stack, GitOps.
---
title: Componentes — K3s Management (C4 Nivel 3)
config:
flowchart:
wrappingWidth: 280
---
flowchart LR
operador(["<span style='color:#fff'><b>Operador HomeLab</b><br/><small>[Person]</small><br/>kubectl / ArgoCD UI</span>"])
git["<span style='color:#fff'><b>Git remoto</b><br/><small>[Software System]</small><br/>maceosoft/gitops</span>"]
subgraph k3s_mgmt["K3s Management"]
direction LR
argocd["<span style='color:#000'><b>Argo CD</b><br/><small>[Component: Helm]</small><br/>GitOps controller + server</span>"]
dex["<span style='color:#000'><b>Dex</b><br/><small>[Component: OIDC]</small><br/>SSO ArgoCD / vCluster / Incus UI</span>"]
subgraph apps["Applications de Argo CD"]
direction TB
sealed["<span style='color:#000'><b>Sealed Secrets</b><br/><small>[Component: controller]</small><br/>Descifra SealedSecret</span>"]
metallb["<span style='color:#000'><b>MetalLB</b><br/><small>[Component: controller]</small><br/>LoadBalancer L2 en LAN</span>"]
ingress["<span style='color:#000'><b>Gateway API (Kong)</b><br/><small>[Component: Helm]</small><br/>HTTP(S) hacia apps</span>"]
openebs["<span style='color:#000'><b>OpenEBS</b><br/><small>[Component: Helm]</small><br/>LocalPV provisioner</span>"]
longhorn["<span style='color:#000'><b>Longhorn</b><br/><small>[Component: Helm]</small><br/>Storage replicado v1</span>"]
suc["<span style='color:#000'><b>SUC</b><br/><small>[Component: Helm]</small><br/>Upgrades K3s escalonados</span>"]
vcluster["<span style='color:#000'><b>vCluster Platform</b><br/><small>[Component: Helm]</small><br/>Sync manual opcional</span>"]
end
capi["<span style='color:#000'><b>Cluster API</b><br/><small>[Component: controllers]</small><br/>Core CAPI controllers</span>"]
capn["<span style='color:#000'><b>CAPN</b><br/><small>[Component: provider]</small><br/>Incus provider controller</span>"]
end
incus["<span style='color:#fff'><b>Incus Cluster</b><br/><small>[Container: Incus]</small><br/>Sustrato LXCMachine</span>"]
operador -->|"Administra<br/><small>[HTTPS]</small>"| argocd
operador -->|"Accede<br/><small>[HTTPS]</small>"| ingress
git -->|"Sincroniza<br/><small>[GitOps]</small>"| argocd
argocd -->|"Despliega config<br/><small>[Helm]</small>"| dex
argocd -->|"Despliega<br/><small>[Application]</small>"| apps
dex -.->|"Emite tokens<br/><small>[OIDC]</small>"| operador
capi -->|"Orquesta<br/><small>[CAPI]</small>"| capn
capn -->|"Provisiona<br/><small>[API REST]</small>"| incus
classDef person fill:#08427B,stroke:#073B6F,color:#fff
classDef system fill:#1168BD,stroke:#0B4884,color:#fff
classDef container fill:#438DD5,stroke:#3C7FC0,color:#fff
classDef component fill:#85BBF0,stroke:#78A8D8,color:#000
classDef external fill:#999999,stroke:#8A8A8A,color:#fff
class operador person
class git external
class incus container
class argocd,dex,sealed,metallb,ingress,openebs,longhorn,suc,vcluster,capi,capn component
style k3s_mgmt fill:none,stroke:#888,stroke-dasharray:6 4
style apps fill:none,stroke:#aaa,stroke-dasharray:2 33.2 — Incus Cluster¶
Internals of the HA (high availability) Incus cluster on the 3 physical nodes: quorum dqlite, daemon
per member, pool local (driver dir), cluster groups, manual scheduler in
oliver, native UI in invincible and OIDC (OpenID Connect) Dex (Phase 4).
Details: Incus Cluster.
---
title: Componentes — Incus Cluster (C4 Nivel 3)
config:
flowchart:
wrappingWidth: 280
---
flowchart TB
operador(["<span style='color:#fff'><b>Operador HomeLab</b><br/><small>[Person]</small><br/>incus CLI / UI</span>"])
k3s_mgmt["<span style='color:#fff'><b>K3s Management</b><br/><small>[Container: Kubernetes]</small><br/>CAPN provider</span>"]
subgraph incus["Incus Cluster"]
dqlite["<span style='color:#000'><b>dqlite</b><br/><small>[Component: DB cluster]</small><br/>Quorum 3 miembros</span>"]
incusd["<span style='color:#000'><b>incusd</b><br/><small>[Component: daemon]</small><br/>API REST en cada nodo</span>"]
storage_pool["<span style='color:#000'><b>Pool local</b><br/><small>[Component: dir driver]</small><br/>Pool local por miembro</span>"]
groups["<span style='color:#000'><b>Cluster groups</b><br/><small>[Component: Incus]</small><br/>x86-nodes / arm64-nodes</span>"]
scheduler["<span style='color:#000'><b>Scheduler</b><br/><small>[Component: Incus]</small><br/>oliver manual</span>"]
incus_ui["<span style='color:#000'><b>Incus UI</b><br/><small>[Component: HTTPS :8443]</small><br/>Solo en invincible</span>"]
oidc["<span style='color:#000'><b>OIDC config</b><br/><small>[Component: Dex]</small><br/>Fase 4 SSO</span>"]
end
operador -->|"Administra<br/><small>[HTTPS]</small>"| incus_ui
operador -->|"CLI<br/><small>[incus]</small>"| incusd
k3s_mgmt -->|"CAPN API<br/><small>[REST]</small>"| incusd
incusd -->|"Persiste estado<br/><small>[dqlite]</small>"| dqlite
incusd -->|"Monta volúmenes<br/><small>[dir]</small>"| storage_pool
groups -->|"Dirige instancias<br/><small>[cluster group]</small>"| scheduler
incus_ui -->|"Proxy UI<br/><small>[local socket]</small>"| incusd
oidc -->|"SSO<br/><small>[OIDC]</small>"| incus_ui
classDef person fill:#08427B,stroke:#073B6F,color:#fff
classDef system fill:#1168BD,stroke:#0B4884,color:#fff
classDef container fill:#438DD5,stroke:#3C7FC0,color:#fff
classDef component fill:#85BBF0,stroke:#78A8D8,color:#000
classDef external fill:#999999,stroke:#8A8A8A,color:#fff
class operador person
class k3s_mgmt container
class dqlite,incusd,storage_pool,groups,scheduler,incus_ui,oidc component
style incus fill:none,stroke:#888,stroke-dasharray:6 43.3 — Workload Clusters¶
Internal structure of a kubeadm ephemeral cluster provisioned by CAPN (Cluster API Provider for Incus)
(e.g., demo): LXCMachine in Incus, control plane, workers, and CNI (Container Network Interface) Flannel of
the workload. Not a nested K3s (lightweight Kubernetes distribution).
---
title: Componentes — Workload Clusters (C4 Nivel 3)
config:
flowchart:
wrappingWidth: 280
---
flowchart TB
k3s["<span style='color:#fff'><b>K3s Management</b><br/><small>[Container: Kubernetes]</small><br/>CAPN + CAPI</span>"]
subgraph workload["Workload Cluster CAPN [kubeadm]"]
direction TB
machines["<span style='color:#000'><b>LXCMachine</b><br/><small>[Component: CAPN]</small><br/>Infra en Incus</span>"]
cp["<span style='color:#000'><b>Control plane</b><br/><small>[Component: kubeadm]</small><br/>API + etcd + scheduler</span>"]
workers["<span style='color:#000'><b>Workers</b><br/><small>[Component: kubelet]</small><br/>Nodos worker</span>"]
cni["<span style='color:#000'><b>CNI</b><br/><small>[Component: Flannel]</small><br/>Red del workload cluster</span>"]
end
subgraph infra[" "]
direction LR
storage["<span style='color:#fff'><b>Storage</b><br/><small>[Container: OpenEBS + Longhorn]</small><br/>PVC del management</span>"]
incus["<span style='color:#fff'><b>Incus Cluster</b><br/><small>[Container: Incus]</small><br/>Aloja LXCMachine</span>"]
end
k3s -->|"Provisiona<br/><small>[CAPN]</small>"| machines
cp -->|"Orquesta<br/><small>[Kubernetes]</small>"| workers
workers -->|"Red de pods<br/><small>[CNI]</small>"| cni
workers -.->|"PVC opcional<br/><small>[CSI]</small>"| storage
machines -->|"Instancia<br/><small>[LXC/VM]</small>"| incus
classDef person fill:#08427B,stroke:#073B6F,color:#fff
classDef system fill:#1168BD,stroke:#0B4884,color:#fff
classDef container fill:#438DD5,stroke:#3C7FC0,color:#fff
classDef component fill:#85BBF0,stroke:#78A8D8,color:#000
classDef external fill:#999999,stroke:#8A8A8A,color:#fff
class k3s,incus,storage container
class machines,cp,workers,cni component
style workload fill:none,stroke:#888,stroke-dasharray:6 4
style infra fill:none,stroke:none3.4 — Storage¶
Logical components of the hybrid tier OpenEBS LocalPV (default, 3 nodes) +
Longhorn v1 (cross-arch replica between invincible and deborah; see Longhorn v1). The pods
run in K3s; here they are modeled as a separate Level 2 C4 container for clarity.
Details: Storage.
---
title: Componentes — Storage (C4 Nivel 3)
config:
flowchart:
wrappingWidth: 280
---
flowchart TB
workload["<span style='color:#fff'><b>Workload Clusters</b><br/><small>[Container: kubeadm]</small><br/>Pods con PVC</span>"]
k3s_mgmt["<span style='color:#fff'><b>K3s Management</b><br/><small>[Container: Kubernetes]</small><br/>Pods del management</span>"]
subgraph storage["Storage tier"]
sc["<span style='color:#000'><b>StorageClasses</b><br/><small>[Component: GitOps]</small><br/>openebs-hostpath + longhorn-mixto</span>"]
openebs_prov["<span style='color:#000'><b>OpenEBS LocalPV</b><br/><small>[Component: DaemonSet]</small><br/>Default 3 nodos</span>"]
longhorn_mgr["<span style='color:#000'><b>Longhorn manager</b><br/><small>[Component: Deployment]</small><br/>Control de volúmenes</span>"]
longhorn_eng["<span style='color:#000'><b>Longhorn engine</b><br/><small>[Component: DaemonSet]</small><br/>Réplicas v1 cross-arch</span>"]
csi["<span style='color:#000'><b>CSI drivers</b><br/><small>[Component: CSI]</small><br/>OpenEBS + Longhorn</span>"]
end
k3s_mgmt -->|"Aplica<br/><small>[homelab-storage]</small>"| sc
workload -->|"Monta PVC<br/><small>[CSI]</small>"| csi
k3s_mgmt -->|"Monta PVC<br/><small>[CSI]</small>"| csi
csi -->|"LocalPV<br/><small>[openebs-hostpath]</small>"| openebs_prov
csi -->|"Réplica HA<br/><small>[longhorn-mixto]</small>"| longhorn_eng
longhorn_mgr -->|"Gestiona<br/><small>[Longhorn API]</small>"| longhorn_eng
classDef person fill:#08427B,stroke:#073B6F,color:#fff
classDef system fill:#1168BD,stroke:#0B4884,color:#fff
classDef container fill:#438DD5,stroke:#3C7FC0,color:#fff
classDef component fill:#85BBF0,stroke:#78A8D8,color:#000
classDef external fill:#999999,stroke:#8A8A8A,color:#fff
class workload,k3s_mgmt container
class sc,openebs_prov,longhorn_mgr,longhorn_eng,csi component
style storage fill:none,stroke:#888,stroke-dasharray:6 43.5 — Cinc Lab¶
Learning sandbox Cinc/Chef in Incus VMs (virtual machines) (Ubuntu 24.04), one in
@x86-nodes and another in @arm64-nodes. Not a production piece of the HomeLab.
Details: Cinc/Chef Lab.
---
title: Componentes — Cinc Lab (C4 Nivel 3)
config:
flowchart:
wrappingWidth: 280
---
flowchart TB
operador(["<span style='color:#fff'><b>Operador HomeLab</b><br/><small>[Person]</small><br/>incus / chef</span>"])
incus["<span style='color:#fff'><b>Incus Cluster</b><br/><small>[Container: Incus]</small><br/>Aloja VMs lab</span>"]
omnitruck["<span style='color:#fff'><b>Omnitruck</b><br/><small>[Software System]</small><br/>Paquetes cinc-client</span>"]
subgraph cinclab["Cinc Lab"]
direction TB
subgraph vms["VMs del lab"]
direction LR
vm_x86["<span style='color:#000'><b>cinc-lab-x86</b><br/><small>[Component: Incus VM]</small><br/>Ubuntu 24.04 @x86-nodes</span>"]
vm_arm["<span style='color:#000'><b>cinc-lab-arm</b><br/><small>[Component: Incus VM]</small><br/>Ubuntu 24.04 @arm64-nodes</span>"]
end
cinc_client["<span style='color:#000'><b>cinc-client</b><br/><small>[Component: deb]</small><br/>Agente Cinc/Chef</span>"]
cookbooks["<span style='color:#000'><b>Cookbooks</b><br/><small>[Component: Git local]</small><br/>cinc-lab/cookbooks</span>"]
end
operador -->|"SSH / chef<br/><small>[lab]</small>"| vms
incus -->|"Aloja<br/><small>[VM]</small>"| vms
omnitruck -->|"Instala<br/><small>[HTTPS]</small>"| cinc_client
cookbooks -->|"Converge<br/><small>[chef-client]</small>"| cinc_client
classDef person fill:#08427B,stroke:#073B6F,color:#fff
classDef system fill:#1168BD,stroke:#0B4884,color:#fff
classDef container fill:#438DD5,stroke:#3C7FC0,color:#fff
classDef component fill:#85BBF0,stroke:#78A8D8,color:#000
classDef external fill:#999999,stroke:#8A8A8A,color:#fff
class operador person
class omnitruck external
class incus container
class cookbooks,cinc_client,vm_x86,vm_arm component
style cinclab fill:none,stroke:#888,stroke-dasharray:6 4
style vms fill:none,stroke:#aaa,stroke-dasharray:2 33.6 — Monitoring¶
Observability stack in the namespace monitoring, deployed by Argo CD. VictoriaMetrics (Prometheus-compatible metrics database) stores the series; vmagent scrapes them every 60 seconds from the nodes, the platform, and Incus; vmalert evaluates the rules and Alertmanager sends the alerts to Discord. The probes are executed by blackbox-exporter (HTTP and DNS seen from inside the cluster). On each node, node-exporter publishes CPU, memory, and temperatures, and also reads the textfile collectors: files .prom that some timers
(systemd timers) write to the node with pending apt patches and the DNS (BIND) status; the SMART role is prepared in the repo.
---
title: Componentes — Monitoreo (C4 Nivel 3)
config:
flowchart:
wrappingWidth: 280
---
flowchart LR
operador(["<span style='color:#fff'><b>Operador HomeLab</b><br/><small>[Person]</small><br/>Grafana vía SSO (Dex)</span>"])
discord["<span style='color:#fff'><b>Discord</b><br/><small>[Software System]</small><br/>alertas-criticas / alertas-avisos</span>"]
healthchecks["<span style='color:#fff'><b>healthchecks.io</b><br/><small>[Software System]</small><br/>Dead man's switch</span>"]
incus["<span style='color:#fff'><b>Incus Cluster</b><br/><small>[Container: Incus]</small><br/>/1.0/metrics en :8443 de cada nodo</span>"]
plat["<span style='color:#fff'><b>Plataforma</b><br/><small>[Container: K3s Management]</small><br/>Argo CD, Longhorn, cert-manager, Kong, MetalLB, Calico</span>"]
web["<span style='color:#fff'><b>Endpoints del HomeLab</b><br/><small>[Software System]</small><br/>argocd, grafana y DNS (BIND) en homelab.local</span>"]
subgraph monitoreo["Monitoreo (namespace monitoring)"]
direction TB
vmagent["<span style='color:#000'><b>vmagent</b><br/><small>[Component: scraper]</small><br/>Recoge métricas cada 60 s</span>"]
vmsingle["<span style='color:#000'><b>VictoriaMetrics (vmsingle)</b><br/><small>[Component: base de series temporales]</small><br/>Almacena las series (PVC Longhorn)</span>"]
vmalert["<span style='color:#000'><b>vmalert</b><br/><small>[Component: rules]</small><br/>Evalúa reglas de alerta</span>"]
alertmanager["<span style='color:#000'><b>Alertmanager</b><br/><small>[Component: notifier]</small><br/>Agrupa, enruta y repite avisos</span>"]
grafana["<span style='color:#000'><b>Grafana</b><br/><small>[Component: UI]</small><br/>Paneles; SSO con Dex</span>"]
blackbox["<span style='color:#000'><b>blackbox-exporter</b><br/><small>[Component: probes]</small><br/>Sondas HTTP, redirección y DNS (VMProbe)</span>"]
subgraph nodos["En cada nodo (invincible, oliver, deborah)"]
direction TB
nodeexp["<span style='color:#000'><b>node-exporter</b><br/><small>[Component: DaemonSet]</small><br/>CPU, memoria, disco, temperaturas</span>"]
textfile["<span style='color:#000'><b>Textfile collectors</b><br/><small>[Component: systemd timers]</small><br/>Parches de apt y estado del DNS (.prom)</span>"]
end
end
textfile -->|"Escribe archivos .prom<br/><small>[/var/lib/node_exporter/textfile]</small>"| nodeexp
vmagent -->|"Scrape<br/><small>[HTTP :9100]</small>"| nodeexp
vmagent -->|"Scrape<br/><small>[ServiceMonitor]</small>"| plat
vmagent -->|"Scrape<br/><small>[HTTPS :8443, certificado cliente metrics]</small>"| incus
vmagent -->|"Scrape<br/><small>[/probe]</small>"| blackbox
blackbox -->|"Sondea<br/><small>[HTTP / DNS]</small>"| web
vmagent -->|"Escribe<br/><small>[remote write]</small>"| vmsingle
vmalert -->|"Consulta<br/><small>[consulta de métricas]</small>"| vmsingle
vmalert -->|"Dispara alertas<br/><small>[HTTP]</small>"| alertmanager
grafana -->|"Consulta<br/><small>[consulta de métricas]</small>"| vmsingle
alertmanager -->|"Avisos<br/><small>[webhook HTTPS]</small>"| discord
alertmanager -->|"Ping Watchdog cada 5 min<br/><small>[HTTPS]</small>"| healthchecks
healthchecks -.->|"Avisa si el ping se corta<br/><small>[Discord]</small>"| discord
operador -->|"Consulta<br/><small>[HTTPS]</small>"| grafana
classDef person fill:#08427B,stroke:#073B6F,color:#fff
classDef system fill:#1168BD,stroke:#0B4884,color:#fff
classDef container fill:#438DD5,stroke:#3C7FC0,color:#fff
classDef component fill:#85BBF0,stroke:#78A8D8,color:#000
classDef external fill:#999999,stroke:#8A8A8A,color:#fff
class operador person
class discord,healthchecks,web external
class incus,plat container
class vmagent,vmsingle,vmalert,alertmanager,grafana,blackbox,nodeexp,textfile component
style monitoreo fill:none,stroke:#888,stroke-dasharray:6 4
style nodos fill:none,stroke:#aaa,stroke-dasharray:2 3Next¶
→ Level 4 — Deployment — physical map of the 3 nodes.