Bare-Metal Kubernetes, Part I: Talos on Hetzner
datavirke.dk
Bare-Metal Kubernetes, Part I: Talos on Hetzner
1–10 of 79 posts
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#2I recently rebuilt my Kubernetes cluster running across three dedicated servers hosted by Hetzner and decided to document the process. It turned into a (so far) 8-part series covering everything from bootstrapping and firewalls to setting up persistent storage with Ceph.
Part I: Talos on Hetzner https://datavirke.dk/posts/bare-metal-kubernetes-part-1-talo...
Part II: Cilium CNI & Firewalls https://datavirke.dk/posts/bare-metal-kubernetes-part-2-cili...
Part III: Encrypted GitOps with FluxCD https://datavirke.dk/posts/bare-metal-kubernetes-part-3-encr...
Part IV: Ingress, DNS and Certificates https://datavirke.dk/posts/bare-metal-kubernetes-part-4-ingr...
Part V: Scaling Out https://datavirke.dk/posts/bare-metal-kubernetes-part-5-scal...
Part VI: Persistent Storage with Rook Ceph https://datavirke.dk/posts/bare-metal-kubernetes-part-6-pers...
Part VII: Private Registry with Harbor https://datavirke.dk/posts/bare-metal-kubernetes-part-7-priv...
Part VIII: Containerizing our Work Environment https://datavirke.dk/posts/bare-metal-kubernetes-part-8-cont...
And of course, when it all falls apart: Bare-metal Kubernetes: First Incident https://datavirke.dk/posts/bare-metal-kubernetes-first-incid...
Source code repository (set up in Part III) for node configuration and deployed services is available at https://github.com/MathiasPius/kronform
While the documentation was initially intended more as a future reference for myself as well as a log of decisions made, and why I made them, I've received some really good feedback and ideas already, and figured it might be interesting to the hacker community :)
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#3I recently rebuilt my Kubernetes cluster running across three dedicated servers hosted by Hetzner and decided to document the process. It turned into a (so far) 8-part series covering everything from bootstrapping and firewalls to setting up persistent storage with Ceph. Part I: Talos on Hetzner https://datavirke.dk/posts/bare-metal-kubernetes-part-1-talo... Part II: Cilium CNI & Firewalls https://datavirke.dk/posts/…
Ah man just looking at that list makes me glad for EKS. But thanks for the effort, I will read to learn more.
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#4Very nice write-up!
I wonder if it's possible to combine the custom ISO with cloud init [0] to automate the initial node installation?
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#5Very nice write-up! I wonder if it's possible to combine the custom ISO with cloud init [0] to automate the initial node installation? [0]: https://github.com/tech-otaku/hetzner-cloud-init
I believe the recommended[1] way to deploy Talos to Hetzner Cloud (not bare metal) is to use the rescue system and Hashicorp Packer to upload the Talos ISO, deploying your VPS using this image, and then configuring Talos using the standard bootstrapping procedure.
This post series is specifically aimed at deploying a pure-metal cluster.
[1] https://www.talos.dev/v1.5/talos-guides/install/cloud-platfo...
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#6I'm going through you series now. Very well done.
I thought I would mention that age is now built in to SOPS, thus needs no external dependencies and is faster and easier than gpg.
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#7I'm going through you series now. Very well done. I thought I would mention that age is now built in to SOPS, thus needs no external dependencies and is faster and easier than gpg.
Have seen age pop up here and there, but haven't spent the cycles to see where it fits in yet, so I just went with what I knew.
Will definitely take a look though, thanks!
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#8I recently rebuilt my Kubernetes cluster running across three dedicated servers hosted by Hetzner and decided to document the process. It turned into a (so far) 8-part series covering everything from bootstrapping and firewalls to setting up persistent storage with Ceph. Part I: Talos on Hetzner https://datavirke.dk/posts/bare-metal-kubernetes-part-1-talo... Part II: Cilium CNI & Firewalls https://datavirke.dk/posts/…
Ah man just looking at that list makes me glad for EKS. But thanks for the effort, I will read to learn more.
Absolutely! If at all possible, go managed, preferably with a cloud provider that handles all the hard things for you like load balancing and so on.
*Sometimes* however, you want or need full control, either for compliance or economic reasons, and that's what I set out to explore :)
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#9Very nice write-up! I wonder if it's possible to combine the custom ISO with cloud init [0] to automate the initial node installation? [0]: https://github.com/tech-otaku/hetzner-cloud-init
I believe the recommended[1] way to deploy Talos to Hetzner Cloud (not bare metal) is to use the rescue system and Hashicorp Packer to upload the Talos ISO, deploying your VPS using this image, and then configuring Talos using the standard bootstrapping procedure. This post series is specifically aimed at deploying a pure-metal cluster. [1] https://www.talos.dev/v1.5/talos-guides/install/cloud-platfo...
Ah, I see. Thanks for the explanation!
Re: Bare-Metal Kubernetes, Part I: Talos on Hetzner
#10I recently rebuilt my Kubernetes cluster running across three dedicated servers hosted by Hetzner and decided to document the process. It turned into a (so far) 8-part series covering everything from bootstrapping and firewalls to setting up persistent storage with Ceph. Part I: Talos on Hetzner https://datavirke.dk/posts/bare-metal-kubernetes-part-1-talo... Part II: Cilium CNI & Firewalls https://datavirke.dk/posts/…
Ah man just looking at that list makes me glad for EKS. But thanks for the effort, I will read to learn more.
Agreed, this is probably the best ad for managed k8s, this and horrors stories about self managed k8s clusters falling appart.