Kubernetes
Kubernetes in the homelab - Part 03 - Getting traffic in with MetalLB and Traefik
Real LoadBalancer addresses on the home network with MetalLB, RKE2's Traefik behind one of them, and a wildcard DNS record for every future application.
Network / Security / Sysadmin / DevOps
Network Stuff and System Administration. Sometimes DevOps.
Featured
Highly available Docker apps - Part 02 - The witness: WireGuard and a three-member etcd
The referee of the whole setup: a small WireGuard network to a VPS and a three-member etcd across two sites - and the first gotcha, which makes Patroni wait forever.
Highly available Docker apps - Part 01 - The plan: two hosts, two sites and a witness
My identity provider, password manager and git server on two Docker hosts at two sites, with automatic failover and no Kubernetes: what HA means here, the pieces, and why a witness.
Get new posts by email
One email per new post.
More posts
All posts →Kubernetes in the homelab - Part 02 - A highly available control plane with RKE2 and kube-vip
Three RKE2 servers with embedded etcd and one floating address for the Kubernetes API - and a failover test that did not test what I thought it did.
7 min readKubernetes in the homelab - Part 01 - Planning and preparing the nodes
Three Debian VMs, one plan: what we are building, how the addresses are split, and how to prepare the nodes - including two gotchas of cloned VMs.
8 min readBack, With a New Look
After a year away, the blog has a new look and a new chapter begins - plus a small ask to support blood cancer research.
1 min read802.11ax Cisco APs not getting IP address from the DHCP server
This post is more of a reminder for myself to remember this in the future. With introduction of Cisco AX access points, the requirement is for the APs to be able to resolve gateway IP address sent via DHCP in ARP. If that doesn't work, no IP address for you! Usually this is not a problem, but I was
2 min readProxmox - Changing Windows 10 BIOS from SeaBIOS to OVMF (UEFI)
Changing Windows 10 BIOS from SeaBIOS to OVMF in Proxmox
2 min readstep-ca Certificate Revocation
In previous posts we successfully deployed our own PKI with step-ca and even configured traefik to use ACME protocol to request certificates from our PKI server. Now we are going to add an additional feature to our PKI, which is active certificate revocation. Smallstep’s step-ca as CA with ACME sup
7 min read