TERAS · mtg-research-sandbox

Cluster

Node IP

51.159.110.207

RAM

32Gi

CPU

—

Storage

—

GPU

None

Network Interface

eno1

Talos Linux

v1.13.4

Networking & Security

Cilium

1.18.10

Tetragon

1.7.0

Cert-Manager

1.19.5

Storage

Rook / Ceph

v1.19.6

Datalake

CNPG

0.28.3 · cluster 0.6.1

Trino

1.42.2

1 worker · 6G heap

Data Platform

OHDSI ATLAS

WebAPI 2.x · OMOP CDM

Apache Superset

chart 0.15.0

Authentication

OpenLDAP

2.6.9-fix · chart 4.3.3

Domain

opvance.local

dc=opvance,dc=local

Config

CI / CD

GitHub ARC

0.14.2

HTTP Routes

URL	Path	Backend	Namespace
Loading…

Monitoring

Zabbix

7.0.12 · HTTPS :8080

Audit Log

immudb 1.10 · 365d retention

Audit Log · tamper-evident (immudb) · pseudonymized

—

Time (UTC)	Source	State	Resource	Detail	Run / User
Loading…

Newest events mirrored from immudb by the audit-collector every 5 minutes (read-only view). Usernames are HMAC-SHA256 pseudonyms; the authoritative, tamper-evident record lives in immudb (teras-auditlog), which is never exposed. actions-runner-system = one line per GitHub job on the self-hosted runners (Time = scheduled, State = scheduled → completed (local facts) → synchronized (GitHub facts: result, job, actor, commit, artifacts)), with job, result, elapsed, user@repo, image and command (approx = end not observed, collector time). Rows tagged imported were back-filled from GitHub Actions history at install, not observed live. cnpg-system rows (lakehouse SQL, one per DB session) appear only when the pgaudit source is enabled.