https://kubernetes.io/

Installing Kubernetes dashboard and enabling access via ingress controller with role-based access control (RBAC) authorization.

· Dashboard
Prepare
Install
Uninstall
· Ingress
Certificate
Configure
Remove Access
· Authorization
Admin User
Cluster Admin User
Read-Only User
Access via kubeconfig
· Summary

Tip: It is advised to use the dashboard in a read-only mode with least privilege users permissions. …


Logo by traefik.io

Provide load balancing, SSL termination, and name-based virtual hosting on a Kubernetes (k3s) cluster using Traefik ingress controller.

· K8s Controller
Prepare
Install
Uninstall
· Traefik Dashboard
Certificate
Authentication
Ingress
· Demo Application
Prepare
Install
Uninstall
Certificate
Ingress
· Summary

Note: The domain referenced in this post is MY_DOMAIN, please change accordingly. If you interested in a local-only work mode, you don’t have to pay for a new domain, just decide on a name and use it. For example, if your desired domain is homelab.com, replace MY_DOMAIN with homelab.

Prerequisites


Logo by cert-manager.io

Automate the process of issuing public key certificates from multiple sources, ensuring they are valid, up to date, and renew before expiration.

· K8s Controller
Prepare
Install
Uninstall
· Self Signed
Issuer
Certificate
· Secrets
· Trust
· Advanced
Share Secrets between Namespaces
· Summary

Note: This post is a quick start guide for deploying and using cert-manager on a Kubernetes cluster.

Prerequisites

Why do we need to worry about certificates? When declaring a domain name i.e my-website.domain.com and addressing it from either…


Logo by raspberrypi.org

Installation instructions for setting up a local Raspberry Pi cluster at your home desk.

· Operating System on SD Card
· Network Setup
· RPi Configuration
· SSH Config
Client
RPi Server
· Verification
· Troubleshooting
Locale Issues
· Summary

Note: For the time this post was published, there isn’t an official Raspberry Pi OS image that supports a 64 bit system. There are beta versions but with limitations. This blog post won’t cover them until officially released.


Logo by Joel Glovier.

Automate your local dev configuration in style on a personal, work or any other machine.

TL;DR

Control the following items from a Git backed repository:

  • .dotfiles
  • Homebrew packages / casks
  • macOS settings override

LONG

· Incentive
· Solution
· dotfiles
· Homebrew packages / casks
· macOS settings override
· Demo
· Summary

What is a .dotfile? It is a standard text file usually located within the $HOME folder. It contains a dot prefix in its name and is a hidden file which you can list with ls -a on a *nix system.

What is a Homebrew package / cask? Homebrew is…


Logo by helm.sh

Learn how to configure the deployment of multiple Kubernetes resources as a single unit using Helm package manager.

· Helm-CLI
Install
Uninstall
· Charts
Search
Install
Upgrade
· Summary

Note: This post is a TL;DR for sharing basic Helm v3 usage which is required for the reader just to get started, for additional information please follow the official docs.

Helm-CLI

Mostly TL;DRs for installing the Helm CLI.​

Install

Install using your favorite package manager, consult with the official docs for additional information.

# tl;dr for macOS
brew install helm

Uninstall

Follow the removal instructions of the package manager…


Logo by by cncf-branding

Install a Rancher Labs Kubernetes distribution (k3s) on a Raspberry Pi cluster.

· Master Server
Install
Uninstall
· Worker Node
Join a Cluster
Uninstall
· Utilities
kubectl
k9s
· Summary

Note: This post refers to laptop / desktop as client machines. These are the clients used to connect to the Raspberry Pi master / worker nodes remotely.

Prerequisites

Zachi Nachshon

Software Architect and DevOps Engineer. Passionate technologist, OSS enthusiast and Raspberry Pi addict — https://zachinachshon.com

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store