cybericebox/laboratory repository overview

⁠Cyber ICE Box — Laboratory Helm chart

⁠Overview

This repository contains an OCI Helm chart, rather than a runnable container image. It deploys the Laboratory infrastructure layer of Cyber ICE Box: a Kubernetes operator, node networking, shared HTTPS and WireGuard proxies, and an optional management agent. The operator creates per-group VPN and internet gateway workloads, devices and lab networks. The chart also configures the Laboratory registry used for image caching and device snapshots.

⁠Deployment

Prepare a Kubernetes 1.33+ cluster with Cilium, Gateway API, cert-manager and suitable persistent storage. Device user namespaces require containerd 2.x and Linux kernel 6.3+; required networking modules and cluster setup are covered in the deployment guide. Use Helm 3.12+.

Create the proxy session Secret and prepare my-values.yaml following the quick start⁠. Then install the released chart:

helm install laboratory \\
  oci://registry-1.docker.io/cybericebox/laboratory \\
  --version 1.0.0 \\
  --namespace laboratory-system --create-namespace \\
  -f my-values.yaml

The release must use the laboratory-system namespace.

⁠Configuration

Required installation values:

operator:
  baseDomain: lab.example.com
  publicVPNEndpoint: vpn.example.com
  supportEmail: [email protected]

For platform integration, enable agent.enabled and declare the platform under tenants; enroll the backend using the generated tenant token. The proxy requires the proxy-session Secret in laboratory-proxy, with a sessionSecret key containing at least 32 bytes. Configure DNS, certificates and storage for your environment; the default self-signed issuer is intended for development. Public ACME certificates require the email and DNS-01 settings described in the values reference.

⁠Versions

Chart versions use X.Y.Z (for example 1.0.0). The corresponding Laboratory images use vX.Y.Z (for example v1.0.0), selected by the chart's appVersion. Pin the chart version for deployment; the chart rejects latest image tags.

⁠Documentation

• Source and architecture⁠
• Chart values⁠
• Deployment, upgrades and removal⁠
• Releases⁠