Control Plane Template
Template Metadata
| Field | Value |
|---|---|
| Repository | konstructio/konstruct-templates |
| Branch / Rev | main |
| Path | cluster-templates/control-plane/ |
| Format | Helm chart (v0.1.0) |
| Description | Management cluster template for Konstruct GitOps — deploys Argo CD applications and core platform components |
Summary
The control plane template provisions the primary Konstruct cluster. It installs the full GitOps platform stack including Argo CD (self-managed), certificate management, DNS automation, secrets management, Vault, kpack image builds, CI runners, and Crossplane for infrastructure provisioning. This is the first cluster in every Konstruct platform deployment.
Unlike the other cluster templates, the control plane template has no infrastructure layer — the cluster already exists when this template is hydrated during bootstrap, so the chart ships no Crossplane Workspace.
Sync Wave Deployment Order
| Wave | App Name | Source | Version | Namespace | Description |
|---|---|---|---|---|---|
| 0 | argocd-projects | gitops repository | HEAD | argocd | Argo CD AppProjects scaffolding |
| 0 | konstruct-clusters | gitops repository | HEAD | argocd | Management cluster registrations app-of-apps |
| 5 | kpack-components | gitops repository | HEAD | kpack | kpack image build controller |
| 10 | cert-manager-components | gitops repository | HEAD | cert-manager | cert-manager CRDs and controller |
| 10 | envoy-gateway-components | gitops repository | HEAD | envoy-gateway-system | Envoy Gateway API controller |
| 10 | external-dns-components | gitops repository | HEAD | external-dns | Automatic DNS record management |
| 10 | konstruct-components | gitops repository | HEAD | konstruct-system | Konstruct API, UI, and operators |
| 19 | cloudflare-origin-issuer-crd | github.com/cloudflare/origin-ca-issuer | v0.6.1 | cert-manager | Cloudflare Origin CA CRDs |
| 19 | cloudflare-origin-ca-issuer | ghcr.io/cloudflare/origin-ca-issuer-charts | 0.5.2 | cert-manager | Cloudflare Origin CA issuer Helm chart |
| 20 | cert-issuers | gitops repository | HEAD | cert-manager | ClusterIssuer resources for TLS |
| 20 | vault-components | gitops repository | HEAD | vault | Vault secret store |
| 30 | external-secrets-operator-components | gitops repository | HEAD | external-secrets-operator | External Secrets Operator CRDs and controller |
| 40 | cluster-secret-store | gitops repository | HEAD | external-secrets-operator | ClusterSecretStore backed by Vault |
| 50 | actions-runner-controller-components | gitops repository | HEAD | github-runner | GitHub Actions Runner Controller |
| 60 | crossplane-components | gitops repository | HEAD | crossplane-system | Crossplane provider for infrastructure as code |
| 60 | github-runner-components | gitops repository | HEAD | github-runner | GitHub Actions RunnerDeployment |
| 60 | reloader-components | gitops repository | HEAD | reloader | Stakater Reloader for ConfigMap/Secret watches |
| 100 | argocd-kustomized-app | gitops repository | HEAD | argocd | Self-managed Argo CD via Kustomize |
| 1000 | clusters | gitops repository | HEAD | argocd | Tenant cluster registrations |
| 1001 | registry | gitops repository | HEAD | argocd | App-of-apps for tenant fleet management |
Apps sourced from "gitops repository" pull from the platform's GitOps repository at the path registry/clusters/{clusterName}/components/{app}. The actual Helm charts and versions are defined in those component directories.