Home Kubernetes cluster

     

  

                 

---

Kubernetes with Talos

Networking

Notes

Cilium CNI

Be sure to set the Pod CIDR to the one you have chosen if you aren't using the Talos default. 10.42.0.0/16 Otherwise, you will more than likely have issues.

Gateway API

Ingress and Gateway API can co-exist. Keep in mind, the DNS must simply be unique.

You'll notice in my repo most of my external/internal services have both route and ingress. I've noticed after using Gateway-API extensively with Cilium that it is not stable enough, and therefore, opted to use envoy's implementation.

So far, it's probably one of the best Gateway API implementation that i've used.

Ingress

For ingress controller we need to add this in order to get proper ip address from Cloudflare LB @ L7.

data:
  use-forwarded-headers: "true"
  forwarded-for-header: "CF-Connecting-IP"

SOPS is only used to create the helm-release required for bitwarden and external-secrets. Previously, it was used throughout the repository however, with external-secrets, bitwarden-sdk, we're able to remove this dependency slightly.

External-Secrets uses bitwarden container to retrieve my bitwarden secrets and creates kubernetes secrets with them.

Also keep in mind, that since the bitwarden container exposes your bitwarden vault, it's good practice to limit who can communicate with it. See the network policy at kubernetes/main/apps/kube-system/external-secrets/app/network-policy.yaml

Nodes/Hardware

Device	Count	OS Disk Size	Data Disk Size	Ram	Operating System	Purpose
Synology RS1221+	1	36Ti HDD / 2Ti NVMe	-	4Gi	DSM 7	NAS
UDM Pro Max	1		-	-	Unifi OS - 4.1	Router / Gateway
Unifi Core Switch XG-16	1	-	-	-	Unifi OS - 6.x	Switch
Unifi Enterprise 24 PoE	1	-	-	-	Unifi OS - 6.x	Switch
Beelink U59 N5105	3	500Gi M2 SATA	-	16Gi	Talos	Kubernetes Masters
MS-01	3	250Gi NVMe	1Ti U.2 NVMe	64Gi	Talos	Kubernetes Workers

---

Extra Documentation

1. frigate
2. scrypted

Archived Documentation

1. tailscale-operator
2. nvidia-device-plugin

⭐ Stargazers

🤝 Gratitude and Thanks

Thanks to all the people who donate their time to the Home Operations Discord community. Be sure to check out kubesearch.dev for ideas on how to deploy applications or get ideas on what you may deploy.

• onedr0p
• bernd-schorgers / bjw-s
• buroa
• joryirving

For all their hard work and dedication