My Home Kubernetes Cluster

... managed with ArgoCD and Renovate

                 

Core Components

Core components that form the foundation of the cluster:

• argoproj/argo-cd: GitOps continuous delivery tool for Kubernetes.
• backube/volsync: Backup and recovery of persistent volume claims.
• cilium/cilium: Kubernetes CNI providing networking, security, and observability.
• envoyproxy/gateway: Kubernetes-based application gateway using Kubernetes Gateway API.
• external-secrets/external-secrets: Manages Kubernetes secrets using Infisical.
• jetstack/cert-manager: Creates SSL certificates for services in my Kubernetes cluster.
• kubernetes-sigs/external-dns: Automatically manages DNS records from my cluster in Cloudflare and Pi-hole.
• openebs/openebs: Container attached storage for Kubernetes.
• rook/rook: Distributed block storage for persistent storage using Ceph.
• siderolabs/talos: Secure, immutable, and minimal Linux distribution for Kubernetes.

Automation

• Github Actions for checking code formatting and running periodic jobs
• Renovate keeps the application charts and container images up-to-date

Cloud Dependencies

• Cloudflare: Tunnels for exposing services, DNS management, and domain management.
• Infisical: Secrets management platform providing secure secret storage and synchronization to Kubernetes.

Directories

This Git repository contains the following directories.

📁 apps            # Application Helm values and configurations grouped by namespace
📁 argocd          # ArgoCD Application manifests and configuration
📁 bootstrap       # Helmfile for bootstrapping core cluster components and CRDs
📁 docs            # Documentation
📁 talos           # Talos Linux configuration files and patches

📚 Documentation

Detailed documentation is available in the docs/ directory:

• Setup Guide: Step-by-step installation and bootstrapping instructions
• Architecture: Comprehensive cluster architecture, networking, and design decisions

External Services

Self Hosted Services

• MailCow: Self-hosted email server suite.
• Pi-hole: Network-wide ad blocker and DNS sink
• OpnSense: Firewall and routing platform.
• Truenas: Network-attached storage (NAS) operating system.

My Home Automation stack is hosted separately on dedicated hardware and is a combination of Home Assistant, Frigate, and Music Assistant.

Saas Services

• Cloudflare: DNS/DDoS management and tunneling services.
• Infisical: Secrets management platform.
• GitHub: Source code hosting and CI/CD with GitHub Actions.
• Backblaze B2: Cloud storage for offsite backups.

Gratitude and Thanks

Thanks to all the people who donate their time to the Kubernetes @Home community.

See LICENSE