DevStats deployment on Akamai Cloud (Linode) dedicated Kubernetes nodes using Helm.

This is deployed:

• CNCF prod, CNCF test, CDF, GraphQL.

• 8 × Linode g7-dedicated-256-56 (56 vCPU, 256 GB RAM, 5 TB NVMe each), region us-ord, VPC 10.60.0.0/24:
  • devstats-compute-01 (10.60.0.31) - Kubernetes master + web/ingress,
  • devstats-compute-02 (10.60.0.32), devstats-compute-03 (10.60.0.33) - web/ingress + sync workers,
  • devstats-prod-db-01..03 (10.60.0.11-13) - prod Patroni PostgreSQL (leader + 2 replicas),
  • devstats-test-db-01..02 (10.60.0.21-22) - test Patroni PostgreSQL (leader + 1 replica).
• Kubernetes 1.36.x installed with kubeadm, flannel CNI, /22 pod CIDRs, up to 1024 pods per node.
• ingress-nginx v1.15.1 (chart 4.15.1), two independent controllers/classes: nginx-prod + nginx-test.
• cert-manager with per-namespace Let's Encrypt issuers; TLS certificates are bucketed per domain (a domain that cannot pass ACME validation can never block certificate issuance for other domains).
• Two Linode NodeBalancers (TCP pass-through 80/443 → ingress NodePorts): prod 172.233.210.24, test 172.233.210.165.
• Storage: OpenEBS (openebs-hostpath on /data, 4.8 TB btrfs per node) + OpenEBS dynamic NFS provisioner (shared backups volume).
• PostgreSQL 17 via Patroni (Zalando spilo images), streaming replication, sync/backup jobs run as Kubernetes CronJobs.
• Namespaces: devstats-prod (~240 projects) and devstats-test (~13 projects).

The complete, command-by-command install + migration runbook (infrastructure creation, Kubernetes, storage, Patroni, ingress, certificates, restores, DNS cutover, validation) is in devstats-linodes-migration-step-by-step.md.

Helper scripts for the Linode infrastructure live in akamai/.

Adding/archiving projects, backups and other operational docs: ADDING_NEW_PROJECTS.md, ARCHIVING.md, BACKUPS.md, GRADUATING.md, ADD_ORG_REPO.md.

DevStats binaries run from the Rust port (devstatscode/rust): every image that contains DevStats binaries is deployed under its -rust name (devstats-prod-rust, devstats-minimal-prod-rust, devstats-test-rust, devstats-minimal-test-rust, devstats-api-prod-rust, devstats-api-test-rust, devstats-reports-rust, devstats-tests-rust) - this is what devstats-helm/values.yaml and the runbooks here use. Images without DevStats binaries (grafana, patroni, static pages, backups page) keep their names; devstats-static-{prod,test} carry the Go replacer/sqlitedb/runq only for REINIT_SHARED_GRAFANA - the shared Grafana data (devstats/devel/create_grafana_shared_data.sh) ships the Rust ones for the grafana pods. The Go images are still built and pushed under their original names (lukaszgryglicki/devstats-prod, ...) as the rollback path: drop the -rust suffix in the *Image values (or kubectl set image the CronJobs/Deployments).

• Oracle Cloud Infrastructure (2025-2026): oci/README_oci.md + oci/ scripts.
• Equinix Metal: equinix/README_equinix.md.
• Packet (pre-Equinix): equinix/README-prev.md.