onedr0p/cluster-template
Cluster Template
This project is a Kubernetes cluster management framework and infrastructure-as-code template designed to bootstrap and maintain Talos Kubernetes clusters on bare-metal or virtual machines. It provides a structured system for deploying complete orchestration environments using declarative configurations and template-driven workflows.
The framework distinguishes itself through a GitOps-driven execution model that utilizes Flux for state reconciliation and Renovate for automated dependency updates of Helm charts and container images. It employs a TOML-based configuration system to generate environment-specific settings and integrates SOPS for encrypting secrets stored within version control.
Broad capabilities include automated system upgrades, cluster capacity scaling, and persistent storage integration via NFS, SMB, or iSCSI. The project also covers network traffic management through automated DNS record updates, split-horizon DNS configuration, and secure tunnel integration.
Features
- GitOps State Synchronization - Continuously synchronizes the live Kubernetes cluster state with a desired state defined in a Git repository using Flux.
- Project Bootstrapping Templates - Provides a predefined blueprint for generating the initial directory structure and declarative configurations for Talos clusters.
- Infrastructure Bootstrapping Templates - Provisions a complete orchestration cluster from scratch using sample files and environment-specific overrides.
- Cluster Bootstrapping - Automates the initial setup and configuration of a complete Talos Kubernetes cluster from a known good state.
- Cluster Configuration Initializers - Creates the initial set of configuration files including encryption keys and deployment tokens.
- Declarative Configuration Files - Defines infrastructure and service settings in version-controlled declarative files to ensure reproducible deployments.
- Cluster Configuration Templates - Generates cluster configuration files from a sample template for customizing hardware and network settings.
- Declarative Infrastructure Management - Defines the entire cluster state in version-controlled configuration files to enable automated deployments.
- Infrastructure-as-Code Templates - Ships a structured configuration system that generates Kubernetes cluster files and network settings from sample templates.
- Infrastructure Templates - Uses declarative templates to generate environment-specific configuration files for cluster hardware and network settings.
- Kubernetes Cluster Management - Provides a comprehensive framework for provisioning, configuring, and maintaining the lifecycle of Kubernetes clusters.
- Talos Kubernetes Bootstrapping - Deploys a complete Talos Kubernetes cluster from scratch using template-driven configuration and GitOps workflows.
- Data Persistence and Storage - Connects Kubernetes workloads to external durable storage using NFS, SMB, or iSCSI protocols.
- State Synchronization Webhooks - Receives push events via webhooks to force immediate synchronization of the cluster state.
- Automated Dependency Updaters - Employs Renovate to automate the lifecycle of dependency updates for Helm charts and container images.
- Automated Dependency Updaters - Uses Renovate to automatically monitor and propose updates for Helm charts and container images via pull requests.
- TOML Configuration Support - Processes a structured TOML configuration file to generate deployment settings and hardware specifications.
- Capacity Scaling - Increases environment resources by preparing new hardware and extending the node configuration.
- Cluster Expansion - Provides the ability to add new nodes to an existing cluster environment without requiring a full redeployment.
- Webhook-Sync Reconciliation - Uses webhooks to trigger immediate cluster state reconciliation upon push events from version control.
- System Upgrade Orchestrators - Automates the update of the operating system and orchestrator versions via central configuration changes.
- DNS Record Updaters - Automatically creates and updates public DNS records for services exposed through the environment gateway.
- Encrypted Secret Management - Integrates SOPS to securely encrypt and manage sensitive configuration secrets within version control.
- Secret Management Integrations - Integrates with external secret management services to handle credential rotation and maintain a single source of truth.
- Cloudflare Tunnels - Connects external users to internal services via secure outbound tunnels, eliminating the need for public IPs.
- Version-Controlled Secret Encryption - Secures sensitive configuration data using SOPS for safe storage within version control repositories.
