projects / arc 1 / invidious on gcp
Invidious on GCP
Operate a real system.
- Status
- building
- Started
- September 2026
- Arc
- 1
- Live at
- not yet
Why
[Two or three sentences: what you set out to prove. E.g. that you can stand up, secure and run a real multi-backend service end to end, and beat a well-known public instance on reliability.]
Decision record
| Decision | Chosen | Because |
|---|---|---|
| [Compute] | [GKE] | [reason] |
| [Secrets] | [OIDC + Secret Manager] | [no stored keys] |
| [Image trust] | [signed, pulled by digest] | see FILE 01 |
Milestones
- Infrastructure as code: GCP, GKE
- Signed images, pulled by digest · field notes
- Multi-backend deployment
- Secrets via OIDC, none stored
- Public health dashboard
- Load-tested scaling
Stack
GKE · Terraform · Ansible · OIDC · SLSA · Prometheus · Grafana
Field notes
- FILE 01 Readable Tags, Verified Digests
Next in the arc: Container engine →