- 3-node HA cluster (k3s v1.36.3+k3s1, embedded etcd) on Hetzner - Netbird VPN mesh (wt0) for all cluster traffic - Longhorn distributed storage (2 replicas, /var/lib/longhorn/) - Traefik ingress (3 replicas, LoadBalancer on all node IPs) - cert-manager with Let's Encrypt (auto-renewing TLS) - Gitea (git + container registry) with SQLite on Longhorn - 4 migrated workloads: wolsey, school-games (3 variants), randomly - All HelmCharts and workload manifests as YAML - deploy.sh for one-shot cluster setup
15 lines
290 B
YAML
15 lines
290 B
YAML
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChart
|
|
metadata:
|
|
name: cert-manager
|
|
namespace: kube-system
|
|
spec:
|
|
repo: https://charts.jetstack.io
|
|
chart: cert-manager
|
|
version: v1.18.2
|
|
targetNamespace: cert-manager
|
|
createNamespace: true
|
|
valuesContent: |-
|
|
crds:
|
|
enabled: true
|