# Kubernetes Infrastructure — Full Map
# Date: 2026-09-22

## 3 GKE Clusters discovered from Makefiles

| Cluster | Project ID | Zone | Purpose |
|---------|-----------|------|---------|
| **alpha-wing** | cfu-main | asia-southeast1-b | Innopharm (manufacturing) |
| **black-bear** | virtue-panakea | asia-southeast2-a | Panakea/Virtue (telemedicine) |
| **white-panther** | innopharm-main | asia-southeast2-b | White Panther (manufacturing/admin) |
| **local-prod** | (local) | 10.1.99.10:6443 | Innopharm local production |

## ChartMuseum (Helm chart registry)
- URL: http://chartmuseum:8080/innopharm (internal)
- URL: http://chartmuseum:8080/panakea (internal)
- GCS Bucket: pharmalink-id-chartmuseum

## 4 GCP Projects confirmed
1. **cfu-main** (asia-southeast1-b) — cluster alpha-wing
2. **virtue-panakea** (asia-southeast2-a) — cluster black-bear
3. **innopharm-main** (asia-southeast2-b) — cluster white-panther
4. **storage-innopharm-prod** — separate storage

## innopharm-production-local — SELF-HOSTED K8s
- REMOTE_SERVER: 10.1.99.10
- REMOTE_PORT: 6443 (Kubernetes API)
- This is a BARE METAL k8s cluster (not GKE)

## New service discovered
- manufacture-core-auth (v0.0.121) — authentication service!
- pristal-accounting-be (v0.0.19) — accounting
- attendance-web-app (v0.0.90) — attendance
- horizon-api (v0.11.0) — horizon API

## GitLab OAuth2 Token (expired)
6314442f2385edd0216b39e9a19f29cdec213e2f483d59ab1d3b6a1fd5636aed
Used in all 13 repo remotes: oauth2:<token>@gitlab.pharmalink.id

## Architecture summary

### alpha-wing (cfu-main, Singapore)
- admin-innopharm-be/fe
- master-manufacturing-be (v0.0.257)
- manufacturing-fe
- pharmavit-master-be/fe
- inventaris-be/fe
- be-smart-building
- smart-building-setting-be
- innokitch
- py-smart-building
- horizon-api
- panakea-be/fe/dashboard
- panakea-virtue-phlebotomist
- panakeavirtue-be/doctor
- panakea-virtue-lab-operators
- iot-healthcare-be

### black-bear (virtue-panakea, Jakarta)
- panakea-be/fe/dashboard
- panakea-py
- panakea-dataplatform-be/fe
- panakeavirtue-be/doctor
- panakea-virtue-lab-operators
- panakea-virtue-phlebotomist
- panakea-virtue-century
- panakea-payment-api
- telekonsultasi-service
- horizon-api
- product-portofolio
- iot-healthcare-be

### white-panther (innopharm-main, Jakarta)
- py-smart-building
- admin-innopharm-be/fe
- be-smart-building
- inventaris-be/fe
- smart-building-setting-be
- **manufacture-core-auth** ← AUTH SERVICE
- manufacture-be
- attendance-web-app
- pristal-accounting-be/fe

## GCP Service Accounts we have keys for
1. cfu-main (588__production.json) — Object Admin on 22 buckets
2. virtue-panakea (1203__appname__monitoringlogs...) — Object Admin on 3 buckets
3. innopharm-main — Object Admin on 1 bucket
4. storage-innopharm-prod — Object Admin

## Can we access GKE clusters with SA keys?
- SA keys are for GCS (storage), not GKE
- gcloud auth activate-service-account would need GKE permissions
- Try: can we list clusters with our SA keys?