Trusted Infrastructure Demonstrations

Le Lab : Sovereign Engineering

Local AI, secured software supply chain, and native efficiency. Each PoC below is industrially validated and designed to solve sovereignty and budget optimization challenges for modern organizations.

AI Ops & Confidentiality

KubeLens: Kubernetes Incident Diagnostics via Sovereign AI

A live demonstration of a local Small Language Model (SLM) capable of analyzing error logs and correlating data with internal documentation (RAG). A sovereign, fast, and eco-designed alternative to externalized SaaS AI platforms.

Scaleway KapsuleQwen 0.5B (CPU)OllamaQdrant

Local CPU Inference Engine

Select a technical incident scenario

AI Ops Analysis Report

Awaiting logs to start inference
The result will be streamed in real time by the local SLM.

Absolute Privacy

The model runs entirely local: sensitive logs and data never leave your trusted ecosystem.

Lean & Low-Cost Inference

Optimized to run natively on standard CPUs. No prohibitive GPU costs or unnecessary carbon emissions.

Local Business Context

Secure indexing and querying of internal technical guides via the Qdrant vector database.

GitHub Repo

Infrastructure as Code

IaC Industrialization & Drift Management

How to automate and standardize the complete lifecycle of a resilient cloud-native infrastructure. This demonstration implements strict guardrails to validate and secure production resource provisioning.

Infrastructure as CodeScaleway ARM64OpenTofu

OpenTofu Immutable Provisioning

graph LR subgraph public ["Public Zone"] direction TB A["<img src='/logo-scaleway-zone.svg'/> DNS Management vvtechsolutions.eu"] end subgraph vpc ["Isolated Secure VPC"] subgraph vpc_padding [" "] direction LR LB["<img src='/logo-scaleway-load-balancers.svg'/> Load Balancer"]:::node-primary subgraph k8s_padding [ ] subgraph k8s ["Scaleway Kapsule (ARM64 Nodes)"] direction TB NA["<img src='/logo-scaleway-instances.svg'/> Node A"] NB["<img src='/logo-scaleway-instances.svg'/> Node B"] end end GW["<img src='/logo-scaleway-public-gateway.svg'/> Public Gateway"]:::node-primary end end A -.- |"HTTPS Requests "| LB LB -.- NA LB -.- NB NA --> |"Secured Outbound Traffic "| GW NB --> |" Secured Outbound Traffic"| GW class public subgraph_padding; class vpc cluster-primary; class vpc_padding subgraph_padding; class k8s_padding subgraph_padding classDef subgraph_padding fill:none,stroke:none

graph TD subgraph public ["Public Zone"] direction TB A["<img src='/logo-scaleway-zone.svg'/> DNS Management vvtechsolutions.eu"] end subgraph vpc ["Isolated Secure VPC"] subgraph vpc_padding [" "] direction LR LB["<img src='/logo-scaleway-load-balancers.svg'/> Load Balancer"]:::node-primary subgraph k8s_padding [ ] subgraph k8s ["Scaleway Kapsule (ARM64 Nodes)"] direction TB NA["<img src='/logo-scaleway-instances.svg'/> Node A"] NB["<img src='/logo-scaleway-instances.svg'/> Node B"] end end GW["<img src='/logo-scaleway-public-gateway.svg'/> Public Gateway"]:::node-primary end end A -.- |"HTTPS Requests "| LB LB -.- NA LB -.- NB NA --> |"Secured Outbound Traffic "| GW NB --> |" Secured Outbound Traffic"| GW class public subgraph_padding; class vpc cluster-primary; class vpc_padding subgraph_padding; class k8s_padding subgraph_padding classDef subgraph_padding fill:none,stroke:none

Industrial Automation

Fully standardized, modular, and reproducible infrastructure rollouts using clean code, permanently eliminating manual interventions (ClickOps).

ARM64 Optimization

Systematic architecture validation on Scaleway ARM64 instances, delivering a price-performance ratio natively superior to traditional x86 topologies.

Zero Drift

Absolute compliance guarantee. Integration of automated validation and security auditing (IaC) pipelines into every commit within GitLab CI/CD.

Software Supply Chain & Zero Trust

Isolated Hybrid GitOps: Cloud deployment without public exposure

Automated continuous deployment via ArgoCD bridging an internal on-premise software forge and a Cloud cluster. Absolute protection against supply chain tampering and external access cuts.

Forge Isolée (On-Premise)Tailscale NAT TraversalArgoCD

ArgoCD Reconciliation Engine

graph LR subgraph padding [" "] direction TB subgraph local_env ["Isolated Internal Software Forge"] GL["<img src='/logo-gitlab.svg'/> GitLab Manifestes GitOps"] end subgraph scw_env ["Trusted Sovereign Cloud"] SM["<img src='/logo-scaleway-secret-manager.svg'/> Secret Manager Coffre-fort managé"] end end subgraph kapsule_cluster ["Target Kubernetes Cluster"] subgraph kapsule_cluster_padding [" "] direction TB ARGO["ArgoCD Moteur GitOps"]:::node-primary ESO["External Secrets Operator Gestionnaire de secrets"]:::node-primary APP["Containerized Applications Pods isolés"] %% Liaisons internes Kapsule ARGO --> |"State Synchronization"| APP ESO --> |"On-the-fly Injection"| APP end end GL -.-> |"Decentralized Secure Tunnel (Zero Trust)"| ARGO SM -.-> |"Secret Retrieval (Encrypted API Key)"| ESO class padding subgraph_padding; class local_env subgraph_padding; class scw_env subgraph_padding; class kapsule_cluster cluster-primary; class kapsule_cluster_padding subgraph_padding; classDef subgraph_padding fill:none,stroke:none

graph TD subgraph padding [" "] direction TB subgraph local_env ["Isolated Internal Software Forge"] GL["<img src='/logo-gitlab.svg'/> GitLab Manifestes GitOps"] end subgraph scw_env ["Trusted Sovereign Cloud"] SM["<img src='/logo-scaleway-secret-manager.svg'/> Secret Manager Coffre-fort managé"] end end subgraph kapsule_cluster ["Target Kubernetes Cluster"] subgraph kapsule_cluster_padding [" "] direction TB ARGO["ArgoCD Moteur GitOps"]:::node-primary ESO["External Secrets Operator Gestionnaire de secrets"]:::node-primary APP["Containerized Applications Pods isolés"] %% Liaisons internes Kapsule ARGO --> |"State Synchronization"| APP ESO --> |"On-the-fly Injection"| APP end end GL -.-> |"Decentralized Secure Tunnel (Zero Trust)"| ARGO SM -.-> |"Secret Retrieval (Encrypted API Key)"| ESO class padding subgraph_padding; class local_env subgraph_padding; class scw_env subgraph_padding; class kapsule_cluster cluster-primary; class kapsule_cluster_padding subgraph_padding; classDef subgraph_padding fill:none,stroke:none

Tailscale Private Networking

Infrastructure interconnection via an encrypted mesh. No firewall ports are opened to the public internet (full NAT Traversal).

Zero Secret Storage

Leveraging External Secrets Operator. Sensitive tokens remain encrypted and are injected dynamically from the cloud Secret Manager.

Disruption Resilience

Intellectual property (code) remains hosted on local hardware; only operational deployments utilize the Cloud environment.

Observability & Networking

Traefik Tailnet Monitor: High Availability & Network Metrics

Real-time, centralized monitoring of traffic passing through the routers of a decentralized private mesh network. This PoC demonstrates the ability to correlate network load and isolate anomalies.

TraefikPrometheusTailscaleK3s

Prometheus Metrics Collector

Communication Link StatusLink Disrupted

Local ProbePrometheus Scraper

Measurement PointTraefik Mesh Edge

Last Scrape--:--:--

Performance & Network Load Metrics Live Polling

Awaiting data from collector
Performance metrics will appear after the first valid communication handshake.

MTTR Reduction

Chirurgical alerting and KPI mapping designed to isolate network root causes in less than 3 minutes.

Multicloud Visibility

Unified centralization of traffic flowing from both physical (On-Premise) infrastructure and remote Cloud instances into a single pane of glass.

Performance Alerting

Instant identification of routing anomalies, bottlenecks, or traffic spikes to preempt infrastructure performance degradation.