Choose a Cloud Profile
Caracal does not ship provider resources or a managed-cloud service. Use this page to connect services you operate to standard Helm interfaces.
Use Criteria
Section titled “Use Criteria”Proceed only when the platform provides Kubernetes, TLS ingress, Postgres, Redis with Streams, secret projection, replay storage, and metrics collection. Provider product names are examples, not certifications.
Dependency Contract
Section titled “Dependency Contract”| Dependency | Required behavior |
|---|---|
| Postgres | TLS connection, migration privileges, capacity, and operator-owned backup/restore |
| Redis | Streams, authentication, persistence, noeviction, and observable pending entries |
| Secrets | Complete runtime Secret; no plaintext in Git or plans |
| Ingress | HTTPS, exact origins and paths, explicit NetworkPolicy ingress |
| Monitoring | Authenticated metrics scraping and actionable alert routing |
Procedure
Section titled “Procedure”- Provision dependencies with platform tooling.
- Project runtime credentials into the namespace.
- Set external hosts and internal URLs in environment values.
- Allow only required DNS, storage, identity-provider, upstream, and export egress.
- Render and review the chart before installation.
Verify and Recover
Section titled “Verify and Recover”Confirm secret synchronization, TLS, network reachability, migrations, /ready, metrics auth, canary authorization, revocation, and audit capture. Test provider-native backup restore. Retain the prior values and release; never rely on provider marketing or chart defaults for recovery behavior.
Next Step
Section titled “Next Step”Use Deploy on Managed Kubernetes for the repository examples and their limits.