News for hackers. Stuff that matters.
Re:Automatic SSL Certificates for internal IP's for home k8 ... by swiley on Thursday September 03, 2020 @07:18AM (#24362854)
I’ve tried to set up kubernetes at home a couple of times and I always freak out at the amount of layers and “just run this” style of tutorials. Am I crazy?

I’ve heard guix has some kind of container management thing. I’ve been thinking about trying it anyway.

Re:Automatic SSL Certificates for internal IP's for home k8 ... by Schwan on Thursday September 03, 2020 @07:34AM (#24362942)
Ubuntu with Microk8s is very simple. Basically a few lines of commands, well documented and addons exist as well for most use cases.

MetalLB for your loadbalancing needs, prometheus/grafana etc.

https://microk8s.io/docs

And microk8s supports multiply nodes now as well.

Re:Automatic SSL Certificates for internal IP's for home k8 ... by achempion on Thursday September 03, 2020 @07:50AM (#24363046)
"Kubernetes at home" called "Docker Swarm".

I've been using it couple of years for many types of workloads and it's been a pleasant experience.

Ansible + docker-compose.yml to manage apps on 1-3 servers. You just install docker and that's it. Swarm configuration is 95% similar to compose file you use locally if you're into developing with Docker.

It has couple of edges if you try to use it for complex setups but for apps with < 5 devs and < 10 services it's really simple. You can still migrate to K8s when you hire dedicated DevOps team because you're running containers and all your setup documented in docker-compose file.

Re:Automatic SSL Certificates for internal IP's for home k8 ... by pas on Thursday September 03, 2020 @07:40AM (#24362976)
k8s needs a control plane, that needs security, hence all the tokens, certs (which need internal and external IPs and FQDNs), also it needs to set up an overlay network (so you need to configure the CNI provider, sysctl stuff for ebtables and iptables/nftables to work correctly), and DNS, and a dashboard would be nice too. oh, and unless you use k3s or something that budles a container runtime (CRI provider) you need to setup one (eg docker).

it's understandably complex, even if many parts are pretty standard (eg. the sysctl stuff, and installing dependencies is basically dnf/yum/apt/apk or exit and let the user do it).

since the most error prone parts were/are setting up the TLS stuff that got automated first (in the form of kubeadm install), and the rest just remains in "run this" form.

but the k3s installer is just a one liner call to a bash script. though then you have to make sure to include the magic env vars to get what you want.

Re:Automatic SSL Certificates for internal IP's for home k8 ... by DenseComet on Thursday September 03, 2020 @03:27PM (#24367781)
The k3sup project [1] takes this a step further and makes installing k3s even easier. k3s has been the most useful piece of infra I run at home. It gives me all the benefits of k8s with none of the complexity.

[1] https://github.com/alexellis/k3sup