# IDS platform

Services on the ids3 cluster at Maastricht University's Institute of Data Science, and how to use them.

**Humans:** read on. **Agents:** fetch [`/llms.txt`](/llms.txt) — the same content, indexed for you, and every page here is also available as raw Markdown by appending `.md`.

---

## The five things everyone uses

| service | URL | sign in with | what it is for |
|---|---|---|---|
| **Coder** | https://coder.k8s.semanticscience.org | Keycloak | your workspace — a VM with a durable home directory, optionally with a GPU |
| **Portal** | https://portal.k8s.semanticscience.org | Keycloak | book GPU time, see your quota, get S3 keys for your data buckets |
| **LiteLLM** | https://litellm.k8s.semanticscience.org | an `sk-` key | one OpenAI-compatible endpoint for every model — local and hosted |
| **Data** | https://data.k8s.semanticscience.org | S3 keys from the portal | per-user object storage |
| **Keycloak** | https://keycloak.k8s.semanticscience.org | — | identity. You do not visit it; everything else redirects here |

One identity for the interactive services: your Keycloak account (realm `ids3`) signs you into Coder, the portal and SigNoz. **LiteLLM is the exception** — its API takes an `sk-` key, and its dashboard uses a separate Keycloak realm (`litellm`, admins) or an email + password from an invite (everyone else). See [Models](models.md).

## Start here

- [Workspaces](workspaces.md) — creating one, sizing it, the GPU rules, the CLI and API
- [Models](models.md) — what is served, how to call it, getting a key, requesting a new model
- [Data](data.md) — buckets, keys, moving files in and out
- [Rules that will bite you](rules.md) — five things that are not obvious and cost people time
- [Asking for things](help.md) — who to ask, and where requests go

## Also on the cluster

Restricted to operators, listed so you know they exist:

| service | what |
|---|---|
| SigNoz — https://signoz.k8s.semanticscience.org | metrics, logs, traces. Keycloak login; read-only for most people |
| Vault | secrets. Nothing you need to touch; apps read it for you |
| Longhorn | the storage behind every volume |
| ArgoCD | deploys everything on this page from git |
| Harbor | container registry |

And research projects with their own sites: ontoexplorer, realm-os, shacl, shexmap, sparqlwatch, sulo-schema-builder. Each has an owner; ask in Slack.

## How this page is maintained

This site is a directory of Markdown in the `MaastrichtU-IDS/services` repository, deployed by the same pipeline as everything it describes. If it is wrong, it is wrong in git — open a pull request or say so in Slack.