Three primary pipelines — Metrics, Logs, and Security Events — traverse 9 Kubernetes nodes across 2 Cilium ClusterMesh-linked clusters. Every signal originates at a workload, is collected by DaemonSet agents, normalised, stored, and terminates in an actionable alert or automated AWX response.
| Property | Value |
|---|---|
| Nodes | 6 (3 ctrl + 3 worker) |
| Total pods | 130 |
| Running | 129 / 130 |
| VIP (ingress) | 172.16.x.x |
| ClusterMesh VIP | 172.16.x.x |
| Storage (PVCs) | 10 bound · 295 GiB |
| Wazuh agents | 6/6 ✔ |
| Tetragon | 6/6 ✔ |
| Fluent Bit | 6/6 ✔ |
| OTel Collector | 6/6 ✔ |
| Property | Value |
|---|---|
| Nodes | 3 (ctrl-plane only) |
| Total pods | 92 |
| Running | 90 / 92 |
| Pending | 1 (clustermesh certs job) |
| VIP (ingress) | 172.16.x.x |
| ClusterMesh VIP | 172.16.x.x |
| Storage (PVCs) | 4 bound · 60 GiB |
| Wazuh agents | 3/3 ✔ |
| Tetragon | 3/3 ✔ |
| Fluent Bit | 3/3 ✔ |
| OTel Collector | 3/3 ✔ |