feat(ai): make the AI platform reference architecture orderable - #250

Draft

grubmeshi wants to merge 60 commits into

mainfrom

feat/stackit-ai-ref-arch

Commits on Aug 11, 2026

feat(ref-arch): draft STACKIT AI reference architecture

grubmeshi
and
claude
committed
2a29fd1
feat(ref-arch): add pluggability seams and one-click delivery model

grubmeshi
and
claude
committed
4bd8787
refactor(ref-arch): drop the chat UI from the AI platform core

grubmeshi
and
claude
committed
92591d4
docs(ref-arch): track folding the SKE Starterkit into the AI architecture

grubmeshi
and
claude
committed
2fb6b21
docs(ref-arch): record install delivery decision and the BBD platform-ref gap

grubmeshi
and
claude
committed
854d238
refactor(ref-arch): generalise to a multi-cloud AI platform architecture

grubmeshi
and
claude
committed
5fd331e
docs(ref-arch): decide per-tenant model serving token scope

grubmeshi
and
claude
committed
9190999
docs(ref-arch): make the deployment vs tenancy model explicit

grubmeshi
and
claude
committed
452e552
docs(ref-arch): resolve bootstrap ordering, request sensitive BB outputs

grubmeshi
and
claude
committed
182a925
docs(ref-arch): compose AI platform as a reusable RA, consolidate cluster ingress

grubmeshi
and
claude
committed
d1b1703
docs(ref-arch): layer stackit-landingzone options, settle SKE exposure

grubmeshi
and
claude
committed
329b0f0
docs(ref-arch): add self-registering SKE cluster block as modules/stackit/ske

grubmeshi
and
claude
committed
4b76bd3
docs(ref-arch): simplify language across the AI platform branch

grubmeshi
and
claude
committed
a46b9bc

Commits on Aug 12, 2026

docs(ref-arch): rewrite the AI platform README as a published architecture

grubmeshi
and
claude
committed
d7e8839
feat(kubernetes/ingress): consolidate cert-manager, HAProxy and the ClusterIssuer

grubmeshi
and
claude
committed
4a1cfd7
feat(stackit/ske): add SKE cluster building block

grubmeshi
and
claude
committed
2f3bc4f
feat(kubernetes/platform): add Kubernetes platform registration building block

grubmeshi
and
claude
committed
06f77bd
feat(stackit/model-serving): finish the module as a publishable building block

grubmeshi
and
claude
committed
b4cd016
feat(ref-arch): make stackit-kubernetes orderable as one cluster building block

grubmeshi
and
claude
committed
43a7c6d
feat: add STACKIT PostgreSQL Flex building block

grubmeshi
and
claude
committed
4d47b15
feat(stackit/storage-bucket): add endpoint output and multipart permissions

grubmeshi
and
claude
committed
1e2b26e
docs: add the ai platform directory

grubmeshi
and
claude
committed
de2f47c
feat(ai): install the LiteLLM gateway with the litellm building block

grubmeshi
and
claude
committed
8b60e42
feat(ai/litellm-team): add the tenant-facing LiteLLM team building block

grubmeshi
and
claude
committed
08108c6
feat(ai/azure-openai): register an Azure OpenAI deployment as a LiteLLM backend

grubmeshi
and
claude
committed
aa6db08
fix(kubernetes/ingress)!: let the caller configure the kubernetes and helm providers

grubmeshi
and
claude
committed
53c23dc
feat(kubernetes/ingress): size every workload for a demonstration cluster

grubmeshi
and
claude
committed
34240c2
feat(stackit/dns): add STACKIT DNS zone building block

grubmeshi
and
claude
committed
1c38225
feat(stackit/model-serving): add the backplane that mints Model Serving tokens

grubmeshi
and
claude
committed
9eb69d2
fix(kubernetes/ingress): pin the STACKIT webhook chart to a version the index serves

grubmeshi
and
claude
committed
80f9bee
fix(stackit/postgresflex): grant postgres-flex.admin at folder scope

grubmeshi
and
claude
committed
096812a
feat(stackit/dns): add record sets to a zone the module does not own
grubmeshi
committed
08c6ef6
fix(stackit/dns): grant dns.admin at folder scope
grubmeshi
committed
58f16eb
refactor(stackit-kubernetes): give each cluster a label in the shared DNS zone
grubmeshi
committed
f505b9c

Commits on Aug 13, 2026

fix(kubernetes/ingress): separate the certificate domain from the solver zone

grubmeshi
and
claude
committed
7826de5
docs(stackit-kubernetes): update the integration to the shared-zone design

grubmeshi
and
claude
committed
67b6e27
test(kubernetes/ingress): cover the DNS-01 certificate domain with unit tests

grubmeshi
and
claude
committed
e545314
refactor(stackit/storage-bucket)!: move the resources into a provider-free submodule

grubmeshi
and
claude
committed
7217cd8
refactor(ske-starterkit): register the e2e platform with the hub module
grubmeshi
committed
122e5bb
fix(stackit/storage-bucket): keep existing buckets across the submodule move

grubmeshi
and
claude
committed
d8e4161
feat(stackit/postgresflex): create a database inside an instance that already exists

grubmeshi
and
claude
committed
3bb9af7
feat: add shared ClickHouse building block for the AI platform

grubmeshi
and
claude
committed
34b4ea4
feat: add per-tenant Langfuse building block for the AI platform

grubmeshi
and
claude
committed
593292d
feat(stackit/ske): add the backplane that grants ske.admin at folder scope

grubmeshi
and
claude
committed
dcb6037
docs(reference-architectures): redraw who orders the SKE cluster

grubmeshi
and
claude
committed
6e78243
feat(ai): pin the Prisma connection pool in both Postgres consumers

grubmeshi
and
claude
committed
8be68b8
refactor(stackit/postgresflex)!: split off a provider-free submodule

grubmeshi
and
claude
committed
0dee5f4
fix(ai/litellm-team): stop publishing the virtual key in cleartext
grubmeshi
committed
e03aa31

Commits on Aug 14, 2026

feat(ai/litellm): add console single sign-on and protect the five seats
grubmeshi
committed
f3c4e76
docs(ai/litellm): drop the untested recovery runbook
grubmeshi
committed
1994bcb
feat(ai/model-access): replace litellm-team with the one tenant-facing block
grubmeshi
committed
e88e86e
feat(ai/model-access): create the per-tenant Langfuse backends
grubmeshi
committed
871905d
docs(ai/clickhouse): fix the ON CLUSTER placement in the GRANT statement

grubmeshi
and
claude
committed
1ee8fca
feat(website): give the AI modules a category of their own

grubmeshi
and
claude
committed
ca7ff1a
feat(stackit): grant service roles at project scope, not folder scope

grubmeshi
and
claude
committed
ec38140
feat(ref-arch/stackit-kubernetes): create its own backplane, drop acme_email

grubmeshi
and
claude
committed
e758c39
feat(ai/litellm): accept a client certificate as the cluster credential

grubmeshi
and
claude
committed
8c5bbd2
feat(ref-arch/ai-platform): make the AI platform orderable

grubmeshi
and
claude
committed
f5ea426
refactor(stackit/dns)!: split off a provider-free zone submodule

grubmeshi
and
claude
committed
b27f978
feat(ref-arch/stackit-landingzone): add the kubernetes and ai options

grubmeshi
and
claude
committed
5b6e27b