Tag: k3s

Cluster API turns k3s cluster lifecycle into YAML: create, scale, and upgrade whole clusters as code with a management cluster, no more one off scripts.

Combine image scanning and runtime detection in k3s with Falco and Trivy Operator. Practical Helm setup, working rules, and alert routing for small clusters.

Pull secrets out of git with External Secrets Operator and Vault on k3s: real server mode, Kubernetes auth that actually works, rotation and audit trails.

A k3s cluster on Raspberry Pi 5 is real Kubernetes with real limits. Which workloads stick, why the M.2 HAT is mandatory, and when to go buy mini-PCs.

Skip Helm for home lab Kubernetes. Kustomize base + overlays give you dev/staging/prod variants with zero templating pain.

Traefik, ingress-nginx, or HAProxy on k3s? ingress-nginx retired in March 2026. Install commands, IngressRoute vs Ingress, and the ServiceLB port trap.

etcd snapshots and Velero on k3s: the native S3 upload flags, the local-path hostPath trap that silently skips your PV data, and a restore drill that works.

Give your bare-metal Kubernetes cluster load-balanced services with MetalLB. Layer 2, BGP, IPAddressPools, and when to use each.

Longhorn is opinionated and simple. OpenEBS is modular with more levers. How the two storage drivers differ on architecture and speed for a 3-node k3s.

ArgoCD runs GitOps on k3s: install it, lay out the repo, and manage apps declaratively from Git. Covers sealed-secrets, sync waves, and app-of-apps.

Master Helm templating sanity. Values files, smart defaults, when to skip Helm entirely, and why nested variables aren't always the answer.

Build a three node Kubernetes cluster on mini PCs with k3s: static IPs, firewall ports, local-path storage, and a first deployment that actually answers.