Tag: kubernetes

Capsule gives k3s tenants namespace isolation without running vCluster. How to carve a home lab cluster into tenants and stop handing out cluster-admin.

Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best, home lab cluster or production multi-tenant setup?

Dragonfly turns your container registry into a P2P swarm. Stop hammering one registry with 200 nodes pulling 4GB GPU images at once.

Stakater Reloader watches ConfigMaps and Secrets and triggers rolling restarts automatically, so your pods always run current config, no kubectl rollout.

Replace flannel with Cilium 1.19 on k3s for eBPF routing, Hubble observability, WireGuard encryption, and L7 network policies, here's when it pays off.

Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric, home lab server plus cloud VPS, one single kubectl context.

Run real KVM virtual machines as Kubernetes resources on k3s. One control plane for pods and VMs, no more juggling Proxmox alongside your cluster every day.

Open Policy Agent and Gatekeeper enforce rules across Kubernetes, block privileged pods, require labels, restrict images. Rego basics and real homelab constraints.

Two ways to give your K8s cluster persistent block storage, Longhorn for simplicity, Rook-Ceph for scale. Real homelab tradeoffs, not vendor marketing slides.

Ingress is the annotation-soup classic. Gateway API is the role-oriented future with proper L4/L7 separation. Here's when to migrate and when to wait.

Your cluster will fail. Velero captures everything, manifests, CRDs, persistent volumes, and lets you replay it on a fresh cluster. Setup, gotchas, real DR plans.

Kustomize patches YAML with overlays. Jsonnet is a real templating language with imports and functions. Here's which K8s manifest tool to pick.