Platform

Platform pages cover how the cluster is built and how GitOps, identity, secrets, storage, admission, CIS scanning, and ingress stay in sync. Start with installation and node provisioning, then Dex, Vault, and Argo CD before you add application workloads. The CKS kubeadm lab is a separate two-node Kubernetes 1.34 cluster for exam practice: you create the VMs yourself, install kubeadm, join the worker, and add a workstation kubeconfig context. Terraform is not used for those guests. The Tailscale Kubernetes Operator is the overlay VPN for ClusterIP Services that should not go on Cloudflare. kube-bench runs the CIS Kubernetes Benchmark against k3s. GPU Operator is how a worker on the second Proxmox node uses that host’s NVIDIA GPU.