Reference Architectures

Curated, end-to-end blueprints that show how multiple building blocks fit together to deliver a complete platform capability. Pick an architecture and get a production-ready platform in minutes. Architectures marked Importable ship their own Terraform code and can be added to meshStack directly.

Azure Kubernetes Platform

A self-service Azure Kubernetes platform that gives application teams their own AKS namespaces with GitHub repositories, GitHub Actions CI/CD pipelines, and a container registry backed by Azure Container Registry — all orchestrated through a single starterkit building block.

3 building blocks

T Cloud Public Landing Zone

Bootstraps a self-service-ready T Cloud Public (Open Telekom Cloud) platform: a backplane IAM user, an optional federated company identity provider, and the T Cloud Public Project platform with a default landing zone, and a management project of its own. Every project gets one IAM group per meshStack role, and federated users are mapped into those groups by the meshStack project they belong to.

2 building blocks

Importable

STACKIT Kubernetes Platform

A sovereign-cloud Kubernetes platform on STACKIT, built on top of a STACKIT Landing Zone: an SKE cluster, cloud-agnostic in-cluster ingress and meshStack identities, and the meshStack SKE platform with one landing zone per stage that application teams order self-service Kubernetes namespaces from.

10 building blocks

Importable

STACKIT Landing Zone

Bootstraps a self-service-ready STACKIT platform: a dedicated STACKIT resourcemanager folder, a foundation project with a service account, and the STACKIT Project platform with a default landing zone. Optionally layers on a hub-and-spoke network topology — a shared network-area address plan (hub) and a self-service routed-network building block (spoke) — when a network configuration is provided.

4 building blocks

Importable