hobby-kube/guide
Guide
This project is a Kubernetes deployment guide and infrastructure provisioner designed for hobbyist and home lab environments. It provides a framework for setting up multi-node clusters across various cloud providers and physical or virtual nodes, acting as a self-hosted cluster orchestrator.
The project focuses on security hardening and infrastructure stability through specific implementation guides. This includes a framework for network security that covers host firewalls and encrypted network overlays, as well as detailed instructions for configuring ingress routing to manage external public traffic via DNS mapping and traffic controllers.
The capability surface extends to distributed storage provisioning, providing methods to implement replicated block storage and persistent volumes that survive container restarts. It also covers automated certificate management for encrypted connections and the configuration of role-based access controls.
Features
- Infrastructure Provisioning Recipes - Uses modular infrastructure provisioning recipes to automate the deployment of multi-node environments.
- Kubernetes Cluster Deployments - Offers an end-to-end framework for installing Kubernetes core components on personal hardware or cloud providers.
- Persistent Storage Volumes - Sets up a replicated block storage layer to provide persistent data volumes for containers.
- Replicated Persistent Volumes - Implements persistent volumes with synchronous block replication across nodes for fault tolerance.
- Cluster Infrastructure Hardening - Establishes a security framework for host firewalls, encrypted network overlays, and certificate management.
- Ingress Controllers - Implements ingress controllers to manage external access to cluster services via host network binding.
- Cloud Infrastructure Provisioners - Ships automated scripts to provision Kubernetes clusters and underlying infrastructure across various cloud providers.
- Self-Hosted Deployments - Provides a framework for deploying and operating distributed storage and networking on user-owned infrastructure.
- Storage Provisioning - Automates the provisioning of distributed block storage across multiple physical or virtual nodes.
- Ingress-Based Routing - Deploys ingress-based routing to direct external HTTP/HTTPS traffic to internal cluster services.
- Encrypted L2 Overlay Tunnels - Establishes encrypted L2 overlay tunnels to secure all internal communication between cluster nodes.
- Automated Certificate Management - Automates the lifecycle of TLS certificates for encrypted HTTPS connections within the cluster.
- Network Security Hardening - Provides comprehensive procedures for securing server infrastructure via firewalls and certificate management.
- Secure Node Networking - Establishes secure node-to-node networking via encrypted tunnels to protect internal cluster traffic.
- Cluster Network Hardening - Implements a security framework using host firewalls and encrypted overlays to protect internal cluster traffic.
- Distributed Storage - Provides a guide for implementing high-availability storage systems across multiple cluster nodes.
- Embedded Datastore High Availability - Deploys high-availability embedded datastores to ensure persistent storage for cluster state objects.
- Kubernetes Traffic Controllers - Provides a configuration guide for Kubernetes-native traffic orchestration and ingress management.
- Ingress Gateways - Configures specialized gateways to manage the external entry points of the Kubernetes cluster.
- External Traffic Routing - Implements mechanisms to route external public web traffic into internal cluster services.
- Firewall Rule Configurations - Configures kernel-level firewall rules at the node level to filter unauthorized network traffic.
- Certificate Renewal Managers - Provides automated retrieval and renewal of security certificates to secure web traffic.
- Firewall Configurations - Utilizes scripts to manage host-based network access rules and port security.
- Role-Based Access Control - Configures role-based access controls to restrict resource management permissions for users and service accounts.
- SSL Certificate Automation - Automates the workflow for obtaining and installing SSL/TLS certificates for secure connections.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
