Tag: k3s

Crossplane vs Terraform and OpenTofu for home lab infra: GitOps-native Kubernetes CRDs versus battle-tested HCL, which one actually fits your k3s cluster?

Stop guessing Kubernetes pod resource limits. Goldilocks + VPA analyze real usage and recommend exactly what CPU and memory your containers need to run.

Stop handing out cluster-admin access to everyone. Capsule gives k3s lab tenants real namespace isolation without the overhead of spinning up vCluster.

Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best, home lab cluster or production multi-tenant setup?

Stakater Reloader watches ConfigMaps and Secrets and triggers rolling restarts automatically, so your pods always run current config, no kubectl rollout.

Replace flannel with Cilium 1.19 on k3s for eBPF routing, Hubble observability, WireGuard encryption, and L7 network policies, here's when it pays off.

Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric, home lab server plus cloud VPS, one single kubectl context.

Run real KVM virtual machines as Kubernetes resources on k3s. One control plane for pods and VMs, no more juggling Proxmox alongside your cluster every day.

kubeadm is the official Kubernetes bootstrapper. k3sup is a one-shot SSH installer for k3s. Here's which one to use for your homelab cluster.

The CRI runtime under your Kubernetes cluster, cri-o vs containerd compared on footprint, distros, performance, and day-2 operability.