HomeLab – Argo CD GitOps: SSH Repo Secret, Connectivity Self-Test, Application Apply & Health Fixes – Day 11
In Day 11 we wired Argo CD to a private GitHub repository via SSH, validated connectivity from the argocd-repo-server pod,[…]
Read more...
Author: admin
HomeLab – GitOps with Argo CD on k3s – Day 10
Goal: Install Argo CD via Helm, expose it through Traefik with mkcert TLS, and bootstrap a first GitOps Application that[…]
Read more...
HomeLab – ConfigMap Index, Helm Upgrade & Rollback – Day 9
Goal: Serve a custom index.html via ConfigMap, mount it into Bitnami nginx, validate over HTTPS through Traefik, then practice Helm[…]
Read more...
HomeLab – Mkcert TLS, Helm Scale & Rollback – Day 8
Goal: Issue a locally trusted TLS cert using mkcert, rotate the Kubernetes TLS Secret for nginx.apps.lan, then practice Helm scale[…]
Read more...
HomeLab – HTTPS for nginx.apps.lan (Traefik TLS) – Day 7
Goal: Enable HTTPS for nginx.apps.lan using a self-signed certificate, store it as a Kubernetes TLS Secret, configure Traefik to use[…]
Read more...
HomeLab – Helm on k3s-master & NGINX via Traefik Ingress – Day 6
Goal: Install Helm on the k3s master, deploy NGINX via Helm, expose it through Traefik Ingress, and reach it from[…]
Read more...
HomeLab – Namespaces, Limits & Quotas in k3s – Day 5
Goal: Create an apps namespace in k3s, enforce sane defaults with LimitRange and ResourceQuota, and validate behavior via kubectl. All[…]
Read more...
HomeLab – Install k3s with Ansible (Token, Role & Playbook, kubectl Verify) – Day 4
Goal: Generate a secure k3s token, deploy a single-master / two-worker k3s cluster with Ansible, and verify the cluster with[…]
Read more...
HomeLab – Pre-flight & Firewall (UFW) for k3s – Day 3
Goal: Prepare Linux nodes for k3s by disabling swap, setting required sysctl and kernel modules, and opening firewall ports via[…]
Read more...
HomeLab – Cloning Workers and Verifying Ansible Connectivity – Day 2
Goal: Create two worker VMs (k3s-w1, k3s-w2), set static IPs on vmnet1, update the Ansible inventory, and confirm connectivity with ansible -m ping.[…]
Read more...