IT-101 v1.1 — Complete Four-Tier Specification Suite
Adds Small, Medium, and Large production tier specifications to complement the PoC spec from v1.0. All four tiers are now specified and ready for implementation.
Four Tiers
| Tier | Users | Nodes | Est. Monthly Cost |
|---|---|---|---|
| PoC | 1–25 | 5 | $0 (Oracle Free Tier) |
| Small (S) | 25–100 | 9–11 | $500–1,500 |
| Medium (M) | 100–500 | 20–27 | $2,500–7,000 |
| Large (L) | 500–2,000+ | 100–200+ | $12,000–40,000+ |
Key Architectural Transitions
PoC → S: K3s HA (3 servers), Longhorn replicated storage, Mattermost chat, Falco+Suricata MUST-HAVE, 2× replicas for critical services
S → M: RKE2, multi-AZ topology, dedicated node pools (ingress/DB/obs/workers), Teleport PAM required, Coraza WAF, Kyverno admission control, per-service PostgreSQL clusters, VictoriaMetrics cluster mode, Loki distributed
M → L: Multi-cluster architecture (mgmt+prod+obs), multi-region, Rook/Ceph distributed storage, OpenCost FinOps, Crossplane day-2 ops, Chaos Mesh quarterly testing, SOAR automation (Shuffle), SOC 2 Type II continuous compliance, SBOM pipeline
Same Core Stack Across All Tiers
All four tiers use the same 24 core tools — Keycloak, OpenBao, Stalwart Mail, Nextcloud, WireGuard+Headscale, ArgoCD, Forgejo, Woodpecker CI, Wazuh, Trivy, Restic+Velero, and more. The tools don't change; only their HA configuration and replica counts do.
See SPECS.md for the full tier comparison including migration path and security controls progression.