# Cluster platform

This stack installs Argo Rollouts, Sealed Secrets, and kube-prometheus-stack on
an existing k3s cluster. Use it on a fresh cluster, or import matching Helm
releases before applying it to a cluster where they already exist.

```bash
cp terraform.tfvars.example terraform.tfvars
terraform init
terraform apply
```

The kubeconfig stays outside the repository. Terraform records only its path.
Application and observability manifests remain under `deploy/` and are applied
after the cluster-wide controllers are ready.

Discord routing is deliberately off by default so a missing webhook cannot
stop Alertmanager. After applying `nereus-discord-sealed.yaml` and confirming
that it produced the `nereus-discord` Secret, set `enable_discord = true` and
apply this stack again.