Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/samip5/k8s-cluster
GitOps/Flux2 managed full-stack Kubernetes clusters
https://github.com/samip5/k8s-cluster
docker helm k8s-at-home kubernetes kubernetes-cluster
Last synced: 7 days ago
JSON representation
GitOps/Flux2 managed full-stack Kubernetes clusters
- Host: GitHub
- URL: https://github.com/samip5/k8s-cluster
- Owner: samip5
- Created: 2021-07-20T23:14:46.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-12-23T12:03:54.000Z (15 days ago)
- Last Synced: 2024-12-23T19:57:13.895Z (14 days ago)
- Topics: docker, helm, k8s-at-home, kubernetes, kubernetes-cluster
- Language: Jinja
- Homepage:
- Size: 8.98 MB
- Stars: 107
- Watchers: 3
- Forks: 5
- Open Issues: 13
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
### My Home Operations Repository :octocat:
_... managed with Flux, Renovate, and GitHub Actions_ 🤖
[](https://talos.dev)
[](https://github.com/samip5/k8s-cluster/actions/workflows/schedule-renovate.yaml)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
### :wrench: Tools
| Tool | Purpose |
|--------------------------------------------------------------------|---------------------------------------------------------------------|
| [flux](https://toolkit.fluxcd.io/) | Operator that manages your k8s cluster based on your Git repository |
| [go-task](https://github.com/go-task/task) | A task runner / simpler Make alternative written in Go |
| [sops](https://github.com/mozilla/sops) | Encrypts k8s secrets with GnuPG |
## 💻 Nodes
| Node | Hostname | RAM | Storage | Function | Operating System |
|-------------------------------|----------|------|----------------------------------------------------|-------------|------------------|
| Raspberry Pi Compute Module 4 | w7 | 8GB | 2TB SSD | Kube Worker | Talos |
| Raspberry Pi Compute Module 4 | cm4-1 | 8GB | 32GB eMMC | Kube Worker | Talos |
| Lenovo ThinkCentre M910q Tiny | w-amd-1 | 32GB | 1TB Kingston DC SSD + 256GB SSD | Kube Worker | Talos |
| Random Chinese N100 board | w-amd-2 | 32GB | 480GB Transcend SSD, 275GB Crucial SSD + 320GB HDD | Kube Worker | Talos |
| HP EliteDesk 800 G2 | w-amd-3 | 32GB | 256GB SSD | Kube Worker | Talos |
| Lenovo ThinkCentre M910q Tiny | m1 | 16GB | 256GB SSD x 2 | Kube Master | Talos |
| Synology VM | m2 | 4GB | 100GB SSD | Kube Master | Talos |
## Storage
| Node | Hostname | RAM | Storage | Function | Operating System |
|--------------|----------|------|------------------------------------------------------------------------------------------|------------|------------------|
| Synology NAS | NAS | 16GB | 2 x 3TB HDD (SMR for backups), 2 x 8TB HDD, 1 TB NVME, 256GB NVME for storage pool cache | NFS Server | DSM 7 |
## Network
| Vendor | Model | Function |
|---------|------------------------------|----------------------------------------------------|
| Juniper | EX2200-48P-4g | Hallway switch with PoE+ and fiber uplinks to rack |
| Juniper | EX3300-48P | Rack switch with PoE++ and 10G SFP+ |
| TP-Link | TL-SG108E | Bedroom switching behind desk |
| Qotom | TLSense C3758 (TekLager.se) | Main router |
All nodes are connected to a dual-stack network, with private IPv4 and public IPv6.
Kubernetes' nodes are on their own VLAN which has access to the NAS.
## ☁️ Cloud Dependencies
While most of my infrastructure and workloads are self-hosted I do rely upon the cloud for certain key parts of my setup. This saves me from having to worry about two things. (1) Dealing with chicken/egg scenarios and (2) services I critically need whether my cluster is online or not.
The alternative solution to these two problems would be to host a Kubernetes cluster in the cloud and deploy applications like [HCVault](https://www.vaultproject.io/), [Vaultwarden](https://github.com/dani-garcia/vaultwarden), [ntfy](https://ntfy.sh/), and [Gatus](https://gatus.io/). However, maintaining another cluster and monitoring another group of workloads is a lot more time and effort than I am willing to put in.
| Service | Use | Cost |
|-----------------------------------------------------------------------|--------------------------------------------------------------------|---------------------|
| [Cloudflare](https://www.cloudflare.com/) | Domain(s) and S3 | ~$20/yr |
| [GitHub](https://github.com/) | Hosting this repository and continuous integration/deployments | Free |
| [Mailbox](https://mailbox.org/) | Email hosting | ~30€/12 months |
| [NextDNS](https://nextdns.io/) | My router DNS server which includes AdBlocking | ~$20/yr |
| [Kapsi internet-users association](https://www.kapsi.fi/english.html) | Hosts my off-site backup aka minio (S3) and own website | 40€/yr |
| [Bilance](https://www.bilanceapp.com) | Budgeting app for iOS and Android | ~30€/yr |
| [1Password](https://1password.eu) | External Secrets and secret management | 20€/yr (Student discount) |
| | | Total: ~140€/yr |
## Stargazers
[](https://star-history.com/#samip5/k8s-cluster&Date)