# GRN.CLOUD Documentation > Developer documentation for GRN.CLOUD — sustainable, sovereign cloud infrastructure > operated in the Netherlands under Dutch and EU law. Compute, Kubernetes, virtualisation, > storage, databases, networking and AI are objects in one Kubernetes API. This site is Markdown-first and built with MkDocs. Every page has a stable URL under https://docs.grn.cloud/ and a Markdown source file in the public repository at https://github.com/grncloud/docs-grn-cloud. Status: early. Some pages establish structure only, with detail added as it is confirmed against the platform. Nothing on this site contains invented command output, screenshots or manifests. ## Get started - [Get started](https://docs.grn.cloud/get-started/): path from zero to a running workload - [Core concepts](https://docs.grn.cloud/get-started/concepts/): projects, clusters, zones, the object model - [Accounts & projects](https://docs.grn.cloud/get-started/accounts/): sign-up, projects, RBAC, quotas - [Billing & usage](https://docs.grn.cloud/get-started/billing/): plans, usage per project, invoices, budgets - [Account](https://docs.grn.cloud/guides/account/): the states of a cloud account besides active, and how to bring it back - [Invoices and payment](https://docs.grn.cloud/guides/account/invoices/): invoices in the customer portal; an overdue invoice pauses the account, with no deletion date - [Paused accounts and restore](https://docs.grn.cloud/guides/account/frozen-tenant/): pause 24 hours after the last order ends, deletion 7 days later, restore from nightly backup for 30 days - [The compliance check](https://docs.grn.cloud/guides/account/compliance-check/): sanctions screening of customers and contacts, possible and confirmed matches - [Access the platform](https://docs.grn.cloud/get-started/access/): console, the oc CLI, tokens ## Products - [Compute & virtualisation](https://docs.grn.cloud/products/compute/): KubeVirt VMs, containers, Knative functions - [Managed Kubernetes](https://docs.grn.cloud/products/kubernetes/): OKE, OKD, OCP with hosted control plane - [Storage](https://docs.grn.cloud/products/storage/): block, file and S3 object storage via CSI - [Databases](https://docs.grn.cloud/products/databases/): PostgreSQL, MariaDB, Redis - [Networking](https://docs.grn.cloud/products/networking/): NetworkPolicy, load balancing, VPN, private networks - [Web hosting](https://docs.grn.cloud/products/web-hosting/): static sites and web apps, domains, TLS - [Application development](https://docs.grn.cloud/products/appdev/): marketplace, pipelines, GitOps - [Security & identity](https://docs.grn.cloud/products/security/): RBAC, isolation, secrets, TLS - [Observability & backup](https://docs.grn.cloud/products/observability/): metrics, logs, alerting, Velero - [AI & Machine Learning](https://docs.grn.cloud/products/ai/): the map of the AI stack - GPUs, serving, gateway, tools, sandbox - [AI inference](https://docs.grn.cloud/products/ai-inference/): serving open-weight models on EU GPUs - [LLM gateway](https://docs.grn.cloud/products/llm-gateway/): OpenAI-compatible endpoint, keys, budgets, routing - [MCP servers](https://docs.grn.cloud/products/mcp/): hosting tools that agents call - [Agent sandbox](https://docs.grn.cloud/products/agent-sandbox/): isolated execution of agent-generated code - [Nextcloud](https://docs.grn.cloud/products/nextcloud/): files, calendar, contacts and OnlyOffice as a managed app; in the shop (Free, Basic, Pro) on apps.grn.cloud; how to create, change, cancel, and its own documentation - [GitLab](https://docs.grn.cloud/products/gitlab/): source control, merge requests, pipelines and a registry as a managed app from the marketplace; how to create, change, cancel, and its own documentation - [n8n](https://docs.grn.cloud/products/n8n/): workflow automation as a managed app from the marketplace; how to create, change, cancel, and its own documentation - [Nexus Repository](https://docs.grn.cloud/products/nexus/): Sonatype Nexus Repository, a private artifact repository as a managed app from the marketplace; how to create, change, cancel, and its own documentation - [Odoo](https://docs.grn.cloud/products/odoo/): Odoo Community business applications as a managed app from the marketplace; how to create, change, cancel, and its own documentation - [Vaultwarden](https://docs.grn.cloud/products/vaultwarden/): a password manager server for the Bitwarden apps as a managed app from the marketplace; how to create, change, cancel, and its own documentation - [Mailu](https://docs.grn.cloud/products/mailu/): a mail server for your own domain as a managed app from the marketplace; how to create, change, cancel, and its own documentation - [Bifrost](https://docs.grn.cloud/products/bifrost/): the AI gateway as a managed app; in the shop, free, on ai.grn.cloud; how to create, change, cancel, and its own documentation - [OmniRoute](https://docs.grn.cloud/products/omniroute/): AI request routing across providers as a managed app; in the shop, free, on ai.grn.cloud; how to create, change, cancel, and its own documentation ## Guides One subject per page of the web console, each in three parts: an overview with an architecture diagram, a step-by-step guide as YAML, and a console walkthrough with screenshots. Every one of these pages also has a guided tour inside the console itself. - [Guides](https://docs.grn.cloud/guides/): index of all resource guides - [PostgreSQL - overview](https://docs.grn.cloud/guides/postgresql/): a database on your project PostgreSQL server; how it fits together - [PostgreSQL - step by step](https://docs.grn.cloud/guides/postgresql/guide/): create, list, change and delete as YAML - [PostgreSQL - console walkthrough](https://docs.grn.cloud/guides/postgresql/console-guide/): the same operations in the web console - [MariaDB - overview](https://docs.grn.cloud/guides/mariadb/): a database on your project MariaDB server; how it fits together - [MariaDB - step by step](https://docs.grn.cloud/guides/mariadb/guide/): create, list, change and delete as YAML - [MariaDB - console walkthrough](https://docs.grn.cloud/guides/mariadb/console-guide/): the same operations in the web console - [Redis - overview](https://docs.grn.cloud/guides/redis/): a private in-memory cache with its own storage; how it fits together - [Redis - step by step](https://docs.grn.cloud/guides/redis/guide/): create, list, change and delete as YAML - [Redis - console walkthrough](https://docs.grn.cloud/guides/redis/console-guide/): the same operations in the web console - [S3 buckets - overview](https://docs.grn.cloud/guides/s3-buckets/): object storage, with credentials issued to your project; how it fits together - [S3 buckets - step by step](https://docs.grn.cloud/guides/s3-buckets/guide/): create, list, change and delete as YAML - [S3 buckets - console walkthrough](https://docs.grn.cloud/guides/s3-buckets/console-guide/): the same operations in the web console - [Volumes - overview](https://docs.grn.cloud/guides/volumes/): block and file storage attached to workloads; how it fits together - [Volumes - step by step](https://docs.grn.cloud/guides/volumes/guide/): create, list, change and delete as YAML - [Volumes - console walkthrough](https://docs.grn.cloud/guides/volumes/console-guide/): the same operations in the web console - [Load balancers - overview](https://docs.grn.cloud/guides/load-balancers/): publish a service outside the cluster; how it fits together - [Load balancers - step by step](https://docs.grn.cloud/guides/load-balancers/guide/): create, list, change and delete as YAML - [Load balancers - console walkthrough](https://docs.grn.cloud/guides/load-balancers/console-guide/): the same operations in the web console - [Firewalls - overview](https://docs.grn.cloud/guides/firewalls/): what a new project admits; opening a service to your project, your tenant, the cluster or the internet - [Firewalls - step by step](https://docs.grn.cloud/guides/firewalls/guide/): create, list, change and delete as YAML; open or close a service for your project, your tenant or the world - [Firewalls - console walkthrough](https://docs.grn.cloud/guides/firewalls/console-guide/): the same operations in the web console - [Subnets - overview](https://docs.grn.cloud/guides/subnets/): an isolated network, optionally reachable from outside; how it fits together - [Subnets - step by step](https://docs.grn.cloud/guides/subnets/guide/): create, list, change and delete as YAML - [Subnets - console walkthrough](https://docs.grn.cloud/guides/subnets/console-guide/): the same operations in the web console - [Fixed address for a pod or VM - overview](https://docs.grn.cloud/guides/fixed-address/): keep one subnet address across pod restarts with an IPAMClaim; limits, and why a VM has one already - [Fixed address for a pod or VM - step by step](https://docs.grn.cloud/guides/fixed-address/guide/): create the claim, attach a workload, verify, list and delete as YAML - [Identity domains - overview](https://docs.grn.cloud/guides/identity-domains/): the realm that holds your users and groups; how it fits together - [Identity domains - step by step](https://docs.grn.cloud/guides/identity-domains/guide/): create, list, change and delete as YAML - [Identity domains - console walkthrough](https://docs.grn.cloud/guides/identity-domains/console-guide/): the same operations in the web console - [Users - overview](https://docs.grn.cloud/guides/users/): people who can sign in; how it fits together - [Users - step by step](https://docs.grn.cloud/guides/users/guide/): create, list, change and delete as YAML - [Users - console walkthrough](https://docs.grn.cloud/guides/users/console-guide/): the same operations in the web console - [Groups - overview](https://docs.grn.cloud/guides/groups/): collections of users that permissions are granted to; how it fits together - [Groups - step by step](https://docs.grn.cloud/guides/groups/guide/): create, list, change and delete as YAML - [Groups - console walkthrough](https://docs.grn.cloud/guides/groups/console-guide/): the same operations in the web console - [Clients - overview](https://docs.grn.cloud/guides/clients/): applications allowed to authenticate against a domain; how it fits together - [Clients - step by step](https://docs.grn.cloud/guides/clients/guide/): create, list, change and delete as YAML - [Clients - console walkthrough](https://docs.grn.cloud/guides/clients/console-guide/): the same operations in the web console - [Two ways to run models](https://docs.grn.cloud/products/ai-paths/): managed vs running your own gateway and serving, and what stays the same when you move - [LLM gateways - overview](https://docs.grn.cloud/guides/deploy-llm-gateway/): why applications should not hold provider keys; provider keys vs virtual keys - [LLM gateways - step by step](https://docs.grn.cloud/guides/deploy-llm-gateway/guide/): one OpenAI-compatible endpoint with keys and budgets - [LLM gateways - console walkthrough](https://docs.grn.cloud/guides/deploy-llm-gateway/console-guide/): deploying a gateway with Import YAML, and why the upstream Helm chart is refused by the SCC - [Virtual keys - overview](https://docs.grn.cloud/guides/add-user-to-gateway/): budgets, rate limits, model scope; one key per caller - [Virtual keys - step by step](https://docs.grn.cloud/guides/add-user-to-gateway/guide/): a virtual key with a spend limit - [Virtual keys - console walkthrough](https://docs.grn.cloud/guides/add-user-to-gateway/console-guide/): the same flow in the web console - [Model providers - overview](https://docs.grn.cloud/guides/add-provider/): what sits behind a model name; routing, failover and naming as a contract - [Model providers - step by step](https://docs.grn.cloud/guides/add-provider/guide/): an upstream provider behind the gateway - [Model providers - console walkthrough](https://docs.grn.cloud/guides/add-provider/console-guide/): reaching the gateway safely by port-forward, and reading a provider's health from the log - [Self-hosted models - overview](https://docs.grn.cloud/guides/host-models/): GPU memory as the binding constraint; self-hosted vs bought - [Self-hosted models - managed serving](https://docs.grn.cloud/guides/host-models/managed/): one LLMInferenceService object; what it builds, and the gateway and GPU constraints - [Self-hosted models - step by step](https://docs.grn.cloud/guides/host-models/guide/): serving open-weight models on EU GPUs - [Self-hosted models - console walkthrough](https://docs.grn.cloud/guides/host-models/console-guide/): deploying a model from the OpenShift AI dashboard form, and the two objects it writes - [Workbenches - overview](https://docs.grn.cloud/guides/workbenches/): what a workbench is, and what it keeps when stopped - [Workbenches - console walkthrough](https://docs.grn.cloud/guides/workbenches/console-guide/): creating, opening, stopping and deleting a JupyterLab or VS Code workbench - [Coding agents - overview](https://docs.grn.cloud/guides/connect-coding-agent/): base URL, virtual key and model name; what changes once an agent is inside your boundary - [Coding agents - step by step](https://docs.grn.cloud/guides/connect-coding-agent/guide/): point OpenCode, Claude Code or Codex at your gateway and verify it - [Coding agents - OpenCode](https://docs.grn.cloud/guides/connect-coding-agent/opencode/): configuring the OpenCode provider, the virtual key and OAuth credential paths, and where token counts are recorded - [Coding agents - console walkthrough](https://docs.grn.cloud/guides/connect-coding-agent/console-guide/): issuing the key in the web console - [MCP servers - overview](https://docs.grn.cloud/guides/deploy-mcp-server/): where the credential stops; tool arguments as untrusted input - [MCP servers - step by step](https://docs.grn.cloud/guides/deploy-mcp-server/guide/): hosting the tools an agent calls - [MCP servers - console walkthrough](https://docs.grn.cloud/guides/deploy-mcp-server/console-guide/): the same flow in the web console - [Agent sandboxes - overview](https://docs.grn.cloud/guides/run-sandboxed-agent/): the four boundaries - identity, network, resources, persistence - [Agent sandboxes - step by step](https://docs.grn.cloud/guides/run-sandboxed-agent/guide/): isolated execution of agent-generated code - [Agent sandboxes - console walkthrough](https://docs.grn.cloud/guides/run-sandboxed-agent/console-guide/): the same flow in the web console - [GitOps - overview](https://docs.grn.cloud/guides/gitops/): Argo CD on the platform; tenant, home project, project naming, what the gitops ServiceAccount may deploy - [GitOps - deploy your first application](https://docs.grn.cloud/guides/gitops/guide/): create an Application in your home project, sync it, watch its status - [GitOps - manage applications](https://docs.grn.cloud/guides/gitops/manage-apps/): update, automated sync, prune, self-heal, rollback, delete, one project per environment - [GitOps - console pages](https://docs.grn.cloud/guides/gitops/console-guide/): the Applications, ApplicationSets and Projects pages in the OpenShift console - [GitOps - rules, limits and troubleshooting](https://docs.grn.cloud/guides/gitops/troubleshooting/): destination and naming rules, tenant quota, common error messages ## Reference - [Reference](https://docs.grn.cloud/reference/): conventions and index - [API](https://docs.grn.cloud/reference/api/): Kubernetes API, authentication, resource groups - [CLI](https://docs.grn.cloud/reference/cli/): oc, virtctl, helm, argocd - [SDKs](https://docs.grn.cloud/reference/sdk/): Kubernetes clients, OpenAI-compatible clients ## Architecture and operations - [Architecture](https://docs.grn.cloud/architecture/): platform shape and design principles - [Account lifecycle](https://docs.grn.cloud/architecture/account-lifecycle/): from sign-up in the shop or first console sign-in, through the compliance check and provisioning, to the 24 hour grace, the pause with its three reasons, deletion after 7 days and restore within 30 days - [Sanctions screening](https://docs.grn.cloud/architecture/sanctions-screening/): what is screened against which lists on GRN.CLOUD's own matcher, the 0.85 threshold, country risk levels, who decides and how it is recorded, what a block does, how to dispute, and the review procedure for GRN staff - [Operations](https://docs.grn.cloud/operations/): what GRN operates vs what you operate - [Runbooks](https://docs.grn.cloud/operations/runbooks/): procedures for planned work - [Troubleshooting](https://docs.grn.cloud/operations/troubleshooting/): symptom-first diagnosis ## Community - [Community](https://docs.grn.cloud/community/): how to contribute and get help - [Contributing](https://docs.grn.cloud/community/contributing/): merge-request workflow - [Style guide](https://docs.grn.cloud/community/style-guide/): voice, structure, formatting - [Page components](https://docs.grn.cloud/community/components/): admonitions, collapsible boxes, code annotations, tabs, filter boxes, captions ## Optional - [Release notes](https://docs.grn.cloud/release-notes/): platform and documentation changes - [Sitemap](https://docs.grn.cloud/sitemap.xml): machine-readable page index