Reusable platform engineering for reproducible infrastructure
Hyperion Community is the public, reusable distribution of Hyperion: deployment-neutral building blocks for infrastructure provisioning, K3s bootstrap, Kubernetes runtime configuration, GitOps, and verification. Live environment configuration, credentials, cluster state, and deployment-specific composition stay private.
Reusable platform building blocks
OpenTofu/Terraform. Provider-free reference infrastructure modules that validate without cloud credentials.
Ansible/K3s. K3s bootstrap automation that validates safely by default; binary installation is explicit and checksum-verified.
Kubernetes/Kustomize. Hardened reference workloads with restricted Pod Security and default-deny network policy.
Flux/GitOps. Pinned Flux tooling and a GitOps pattern for consuming reviewed immutable revisions without private bootstrap credentials.
Verification and publication safety. Reproducible tooling, hosted read-only CI, IaC scanning, and tests that guard the public/private boundary.
In the repository
Infrastructure contract
Reusable provider-free module plus a local reference consumer in examples/local/.
Host bootstrap
K3s role plus a non-mutating public validation playbook.
Hardened runtime example
Digest-pinned workload, restricted namespace, ServiceAccount, and NetworkPolicies.
Security and publication checks
Threat model, provenance review, Trivy, Checkov, and deterministic publication-audit tests.
Verify from a fresh clone
With mise installed, run the same verification contract used by CI:
mise install
mise run doctor
mise run lint
mise run ci
The basic path needs no private repository, cluster, cloud credential, or deployment secret. It validates source, reference examples, rendered manifests, and security checks without deploying infrastructure; end-to-end K3s lifecycle and production cloud provisioning remain outside the supported scope.
Public/private trust boundary
Public examples are purpose-built reference inputs, not redacted copies of live environments.
Live inventories, cluster overlays, credentials, encrypted deployment material, topology, private integrations, and deployment-specific composition are not part of this distribution.
Components are published only after provenance, security, and validation review.
The Apache-2.0 license applies to Hyperion Community only. Private Hyperion deployment source is a separate codebase and remains private.