How santisbon/pds works
This repository packages a self-hosted AT Protocol PDS for Kubernetes and provides operator scripts for managing accounts and repository identity/data. The main workflow is deploying the PDS and its storage, exposing it through Cloudflare Tunnel, then using the scripts for account lifecycle and ongoing maintenance. The README documents the deployment relationships and the scripts’ capabilities, but no source excerpts were available; script-to-service calls and detailed chart wiring are therefore not inferred.
Main entry points: values.yaml Chart Configuration · deployment.yaml PDS Deployment · deployment-cloudflared.yaml Tunnel Pods · configmap-cloudflared.yaml Tunnel Config
Components 23
PDS Deployment
- Chart Configuration
charts/pds/values.yaml - PDS Deployment
charts/pds/templates/deployment.yaml - Upstream PDS
- Repo PVC
charts/pds/templates/pvc.yaml - S3 Blob Store
Network Access
- Tunnel Config
charts/pds/templates/configmap-cloudflared.yaml - Tunnel Pods
charts/pds/templates/deployment-cloudflared.yaml - ClusterIP Service
charts/pds/templates/service.yaml - LAN HTTP Route
charts/pds/templates/httproute.yaml
Account Operations
- Create Accounts
scripts/create-account.sh - List And Check
scripts/list-accounts.sh - Invite Codes
scripts/create-invite-code.sh - Email Confirmation
scripts/request-email-confirmation.sh - Account Lifecycle
scripts/deactivate-account.sh - Account Deletion
scripts/delete-account-self.sh
Identity And Repos
- Custom Handles
scripts/update-handle.sh - Rotation Keys
scripts/rotate-plc-rotation-key.sh - Repo Backup Restore
scripts/backup-repo.sh - Missing Blob Upload
scripts/upload-missing-blobs.sh - DID Tombstone
scripts/tombstone-did.sh
Other components
- PDS Operator
- Helm Client
- Cloudflare Edge
Connections 23
- PDS Operator → Helm Client: deploys with
- Helm Client → Chart Configuration: applies settings
- Chart Configuration → PDS Deployment: configures
- PDS Deployment → Upstream PDS: runs
- Upstream PDS → Repo PVC: stores repos
- Upstream PDS → S3 Blob Store: stores blobs
- Chart Configuration → Tunnel Config: configures
- Tunnel Config → Tunnel Pods: configures
- Tunnel Pods → ClusterIP Service: forwards HTTP
- ClusterIP Service → PDS Deployment: selects pods
- Cloudflare Edge → Tunnel Pods: tunnels TLS
- PDS Operator → LAN HTTP Route: enables optionally
- PDS Operator → Create Accounts: runs
- PDS Operator → List And Check: runs
- PDS Operator → Invite Codes: runs
- PDS Operator → Email Confirmation: runs
- PDS Operator → Account Lifecycle: runs
- PDS Operator → Account Deletion: runs
- PDS Operator → Custom Handles: runs
- PDS Operator → Rotation Keys: runs
- PDS Operator → Repo Backup Restore: runs
- PDS Operator → Missing Blob Upload: runs
- PDS Operator → DID Tombstone: runs