NoviArc Platform

How this page reached you

1. Your browserHTTPS
2. Edge ServicesTLS · WAF
3. Load Balanceraccepts Edge only
4. KapsuleTraefik · Gateway API
5. Podnoviarc-demo-cf5f74d8f-kws2x

Served by noviarc-demo-cf5f74d8f-kws2x at 2026-11-02T15:35:34+00:00. Refresh to see the replicas take turns.

Try the web application firewall

These links carry typical attack payloads. The WAF at the edge blocks them with 403 Forbidden before they reach the cluster.

What runs on the platform

• GitOps

  Flux CD reconciles the whole cluster from Git. Infrastructure is Terraform.

• Identity

  Microsoft Entra ID single sign-on for kubectl, Grafana, Headlamp and RabbitMQ.

• Private access

  Internal tools are reachable only over a NetBird VPN, never from the internet.

• Observability

  OpenTelemetry, Prometheus, Loki, Tempo and Grafana.

• AI operations

  HolmesGPT on Mistral through Scaleway Generative APIs, with Robusta alerting.

• Messaging

  A three-node RabbitMQ cluster with quorum queues, managed by operators.

• Security

  Kyverno policies, default-deny network policies, secrets in Scaleway Secret Manager.

• Hub and spoke

  Separate Projects with VPC peering, a shared registry and per-environment state.