---
title: "Infrastructure SOPs"
description: "Standard operating procedures for infrastructure tasks."
image: "https://docs.virdx.dev/img/virdx-social-card.png"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.virdx.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Infrastructure SOPs

## Running things on the cluster

- [Executing jobs / images / runs on the cluster](/knowledge/wiki/workstreams/infrastructure/sops/executing-jobs-on-the-cluster)
  — pathways, build systems, run mechanisms, gotchas, and the Argo
  creator-label/Kyverno identity trap.
- [vxData production DB restore + cluster storage gotchas](/knowledge/wiki/workstreams/infrastructure/sops/vxdata-db-restore-and-cluster-gotchas)
  — Postgres restore-from-S3 runbook, the vxData production deployment
  contract, and the cluster-wide traps: topolvm-no-replication, ArgoCD
  self-heal, the Argo 128KB `ARGO_TEMPLATE` limit, nginx `worker_processes`,
  `imagePullSecrets`, registry mirrors vs pull-through caches, and bulk rclone
  migrations.
- [Coder workspace template](/knowledge/wiki/workstreams/infrastructure/sops/coder-workspaces) — where the template lives,
  the `gpu_enabled` MIG toggle, and the ArgoCD exclusion that makes template
  changes a manual Coder update.
- [Keel auto-redeploy](/knowledge/wiki/workstreams/infrastructure/sops/keel-auto-redeploy) — how Keel is deployed
  (polling, no webhooks) and the annotations that wire a Deployment to a
  mutable tag.

## vxData

- [vxData SDK + schema model](/knowledge/wiki/workstreams/infrastructure/sops/vxdata-sdk-and-schema-model) — resource/payload
  model, the current SDK surface, the `child_identifiers` tree-navigation
  gotcha, and the `apps/vxdata-api` local dev loop.
- [vxData jobs ingestion patterns](/knowledge/wiki/workstreams/infrastructure/sops/vxdata-jobs-ingestion) — writing an
  ingestion job in `apps/vxdata-jobs`: discovery, mapping, stable identifiers,
  linking, plus the polars and vxAnnotate data traps.
- [vxAnnotate ↔ vxData sync](/knowledge/wiki/workstreams/infrastructure/sops/vxannotate-vxdata-sync) — ID mapping, why mask
  decoding belongs in `vxa-sdk`, and which job template to copy.
- [PHI-safe data handling](/knowledge/wiki/workstreams/infrastructure/sops/phi-safe-data-handling) — what deliberately holds
  PHI, the missing guardrails, and the PHI-safe profiling recipe. Read before
  profiling or exporting anything.

## Apps and packaging

- [Dashboard app — local dev and deploy](/knowledge/wiki/workstreams/infrastructure/sops/dashboard-app-dev-and-deploy) —
  mock-mode dev, the `@virdx/ui-components` build prerequisite, metrics
  sources, the Containerfile COPY-allowlist trap, and the image-tag + Keel
  deploy model.
- [Dashboard histo tile serving](/knowledge/wiki/workstreams/infrastructure/sops/dashboard-histo-tile-serving) — the
  `dashboard-api` `/histo` router (large_image TIFF + OME-Zarr streaming) and
  the read-only storage hostPath mounts it needs.
- [Conda packaging and releases](/knowledge/wiki/workstreams/infrastructure/sops/conda-packaging-and-releases) — the actual
  `*-package.yml` / `*-release.yml` flow, multi-output recipes for in-repo path
  dependencies, and the ABI/lockfile pitfalls.
- [vxconvert DICOM-to-BIDS conversion](/knowledge/wiki/workstreams/infrastructure/sops/vxconvert-dicom-to-bids) — the
  HeuDiConv wrapper, two-phase header/pixel split, and vicom enrichment.
- [Docs site — build, mirroring, and editing rules](/knowledge/wiki/workstreams/infrastructure/sops/docs-site) — how
  `docs.virdx.dev` is built and why content stays in this repo.

Source: https://docs.virdx.dev/knowledge/wiki/workstreams/infrastructure/sops/index.mdx