Capability Map

Use this map to move from a platform capability to the design decisions, operating procedures, and recorded evidence behind it.

It is a navigation layer for technical readers who want to inspect how a capability is designed, operated, and verified across the documentation set.

Supporting standards:

• Evidence and redaction standard
• Runtime root and packaging standard

---

How to use this map

1. Start with the Capability entry points table and open the most relevant reference scenario or runbook.
2. Use the Theme column to jump to the matching section below.
3. Expand that section to see the related reference scenarios, runbooks, and HOWTO guides.

---

Capability entry points

Capability	Read first	Theme
Disaster recovery orchestration	PostgreSQL HA DR cycle	DR flows, Cost guardrails
Database failover and promotion	DB failover runbook	DR flows
Hybrid networking architecture	Hybrid WAN edge and site extension	Networking
SDN network foundation	Proxmox SDN network foundation	Networking
Network emulation lab	EVE-NG lab foundation	Networking
GitOps platform delivery	GitOps Kubernetes foundation	Delivery
Source-of-truth automation	Authoritative on-prem foundation	Source of truth
Infrastructure image lifecycle	VyOS image build lifecycle	Images

---

By theme

The sections below group the supporting material by capability area.

Networking & hybrid connectivity

Hybrid routing, site-to-site connectivity, SDN foundations, and network emulation across on-prem and cloud environments.

Reference scenarios

• Hybrid WAN edge and site extension
• Proxmox SDN network foundation
• EVE-NG lab foundation

Runbooks

• Full-mesh topology
• VRRP cross-vendor gateway

HOWTO guides

• Full-mesh routing lab
• Dual-ISP pfSense / CSR lab
• VRRP cross-vendor gateway lab

---

Source of truth & NetBox automation

NetBox provides the authoritative inventory, IPAM, and topology model used by platform automation.

Reference scenarios

• Authoritative on-prem foundation

HOWTO guides

• NetBox deployment on RKE2
• NetBox inventory flow

---

Delivery platform & GitOps

Infrastructure provisioning and Kubernetes workload reconciliation.

Reference scenarios

• GitOps Kubernetes foundation

HOWTO guides

• GitOps onboarding with Argo CD

---

Images and bootstrap

Infrastructure template creation and first-boot verification.

Runbooks

• VyOS image build lifecycle
• Proxmox template build pipeline

HOWTO guides

• Packer Proxmox template pipeline
• RKE2 bootstrap from templates

---

Disaster recovery flows

Hybrid failover between on-prem and cloud infrastructure.

Reference scenarios

• PostgreSQL HA DR cycle
• Managed PostgreSQL DR with Cloud SQL

Runbooks

• DR cutover on-prem -> cloud
• DR failback cloud -> on-prem
• DB failover procedure

---

Cost guardrails & decision service

Operational decision logic governing disaster recovery and platform actions based on readiness and cost signals.

Runbooks

• Cost guardrail breach response