| Component | Details |
|---|---|
| Host type | QEMU/KVM virtual machine |
| CPU | Intel Core (Broadwell, no TSX, IBRS) — 8 vCPUs (8 sockets × 1 core × 1 thread) |
| RAM | 31 GB total, ~10 GB available |
| GPU | Cirrus Logic GD 5446 (emulated VGA — no CUDA, no GPU inference) |
| # AirVPN WireGuard values — populated by wg-to-env.scm | |
| AIRVPN_PRIVATE_KEY= | |
| AIRVPN_TUNNEL_IPV4= | |
| AIRVPN_TUNNEL_IPV6= | |
| AIRVPN_MTU=1320 | |
| AIRVPN_SERVER_PUBKEY= | |
| AIRVPN_PRESHARED_KEY= | |
| AIRVPN_ENDPOINT_IP= | |
| AIRVPN_ENDPOINT_PORT= | |
| AIRVPN_KEEPALIVE=15 |
| Repo | PR | Title | Author |
|---|---|---|---|
| datum-cloud/engineering | #259 | ops: add on-call log issue template | drewr |
| datum-cloud/enhancements | #712 | feat: Galatic VPC underlay network requirements | privateip |
| datum-cloud/engineering | #254 | Ops Review: Weekly traffic report 2026-05-04 | drewr |
| datum-cloud/datum | #222 | chore(deps): update dependency golangci/golangci-lint to v2.12.2 | renovate[bot] |
| datum-cloud/engineering | #251 | docs: support process and knowledge base | drewr |
| datum-cloud/infra | #2271 | feat: add us-central-2 (Chicago / ORD) edge cluster overlay | aflor024 |
| # Datum Cloud Infrastructure Service Catalog | |
| > Generated 2026-04-10 from live Kubernetes clusters (prod + staging). | |
| > Covers all Deployments, StatefulSets, and DaemonSets across both environments. | |
| --- | |
| ## API Server Inventory | |
| ### Aggregated API Servers in the Host GKE Cluster |
Research question: Are there Kubernetes-native projects analogous to Ze (a Linux-host-level Network OS with native BGP) that "turn a cluster into a network device" using operators and CRDs?
Short answer: Yes, but exact analogs are rare. Most projects use Kubernetes as a deployment platform for network functions rather than making the cluster itself a network device.
- Listeners on ports 80 (HTTP) and 443 (HTTPS) with TLS termination
- Request matching — method, path (prefix/exact), headers, query params, scheme (up to 128 matches across 16 rules)
- Request/response header modification — add, set, remove headers
- URL rewriting — hostname and path rewriting (prefix/exact)
- Redirects — scheme, hostname, port, path, and status code
All schools listed are NCAA Division III with on-campus housing, a track & field program, and a high acceptance rate.
| # | School | Location | Division | Approx. Acceptance Rate | Undergrad Size |
|---|---|---|---|---|---|
| 1 | North Central College | Naperville, IL | NCAA DIII | ~60% | ~3,000 |
| 2 | Wartburg College | Waverly, IA | NCAA DIII | ~80% | ~1,500 |
| 3 | Augustana College | Rock Island, IL | NCAA DIII | ~65% | ~2,500 |
| 4 | Loras College | Dubuque, IA | NCAA DIII | ~82% | ~1,500 |
Activity across datum-cloud/enhancements, datum-cloud/infra, and datum-cloud/network-services-operator. Period: January 1 – March 10, 2026.
The activity system went from an idea to a fully deployed production service. Work spanned the activity-apiserver (sharing the etcd cluster, infra#1875), activity-processor with NATS mTLS (infra#1584, infra#1587), a ClickHouse full-text index fix for v26.1 (infra#1885), the activity-ui (infra#1581), ActivityPolicy support wired into dns-operator ([infra#1832](https://github.com
The authoritative DNS service solves two distinct but related problems:
User-facing DNS management: Datum Cloud customers own domain names (e.g., example.com) and want
Datum to serve authoritative DNS for them. Users create a Domain resource to claim ownership, a
DNSZone resource to declare a hosted zone, and DNSRecordSet resources to manage records. Datum's
infrastructure then serves live DNS responses for those zones.