My home Kubernetes cluster ⛵

... managed by Flux and serviced with RenovateBot 🤖

Bootstrap Flux

flux bootstrap github \
  --version=latest \
  --owner=auricom \
  --repository=home-cluster \
  --path=cluster \
  --personal \
  --network-policy=false

SOPS secret from GPG key

gpg --export-secret-keys --armor <GPG_KEY_ID> | kubectl create secret generic sops-gpg --namespace=flux-system --from-file=sops.asc=/dev/stdin

Encrypt kubernetes resources with sops binary

sops --encrypt --pgp=<GPG_KEY_ID> --encrypted-regex '^(data|stringData)$' --in-place <FILE_PATH>

Labels nodes

kubectl taint node k3os-server k3s-controlplane=true:NoSchedule

kubectl label node k3os-worker1 node-role.kubernetes.io/worker=true
kubectl label node k3os-worker2 node-role.kubernetes.io/worker=true
kubectl label node k3os-worker3 node-role.kubernetes.io/worker=true

kubectl annotate node k3os-worker1 node.longhorn.io/default-node-tags='["storage","fast"]'
kubectl annotate node k3os-worker2 node.longhorn.io/default-node-tags='["storage","fast"]'
kubectl annotate node k3os-worker3 node.longhorn.io/default-node-tags='["storage","fast"]'

kubectl annotate node k3os-worker1 node.longhorn.io/create-default-disk='config'
kubectl annotate node k3os-worker2 node.longhorn.io/create-default-disk='config'
kubectl annotate node k3os-worker3 node.longhorn.io/create-default-disk='config'

kubectl annotate node k3os-worker1 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]
kubectl annotate node k3os-worker2 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]
kubectl annotate node k3os-worker3 node.longhorn.io/default-disks-config=[ { "name":"fast-ssd-disk", "path":"/var/lib/longhorn", "allowScheduling":true, "storageReserved":304857600, "tags":[ "ssd", "fast" ] }]

#kubectl label node k3os-server plan.upgrade.cattle.io/k3os-latest=true
#kubectl label node k3os-worker1 plan.upgrade.cattle.io/k3os-latest=true
#kubectl label node k3os-worker2 plan.upgrade.cattle.io/k3os-latest=true
#kubectl label node k3os-worker3 plan.upgrade.cattle.io/k3os-latest=true

https://github.com/rancher/k3s/issues/1401 for k3os-system deployment