Concepts
Key architectural concepts and design decisions behind THB infrastructure.
- TFO is the orchestrator that ensures Terraform is executed with safety guards, automatic initialization, and service account impersonation
- Build System explains the hermetic build system that orchestrates Terraform, Go, Python, and dependencies.
- GCP Project Organization — navigating the GCP organization and its project hierarchy
- App Service Accounts — per-app GCP SAs that replace shared compute-SA identity on swarm workers
- CFO is the continuous fuzzing orchestrator that runs fuzz tests on a schedule, tracks results over time, and reports drift to DevHive
- Secrets Management — how application secrets are stored in GCP Secret Manager and how to update them
- Swarm explains the architecture of our Docker Swarm clusters (non-production and production).
- Desktop Dev Hosts documents the two on-prem Proxmox hosts on the HQ dev VLAN.