• Use a letsencrypt certificate on Kubernetes with cert-manager and Traefik

  4 min read

  
  

  To be able to automatically request letsencrypt certificates for the TLS-eanble Ingress objects in a kubernetes cluster with the traefik ingress controller we can use the cert-manager controller.

  23/05/2023

  Read more...

• Automatically stablish a SSH tunnel to connect to k8s with kubectl

  4 min read

  
  

  Kubernetes is a powerful container orchestration platform used by many organizations to deploy and manage their applications. Interacting with a Kubernetes cluster requires configuring the kubeconfig file with the necessary credentials. However, managing these credentials can be challenging, especially in scenarios where a bastion host or SSH tunnel is required.

  With kubectl-tokensshtunnel we can automate the process of creating an SSH tunnel to a remote server and retrieving the Kubernetes credentials from there. This tool simplifies access to remote Kubernetes clusters by securely caching the credentials for a specified duration.

  18/05/2023

  Read more...

• Install AWS cloud provider on a k3s cluster

  2 min read

  
  

  One of the drawbacks of installing k3s on a EC2 instance versus using EKS is that we loose the AWS integration, so we cannot use AWS load balancers by default. Thanks to the AWS cloud provider we can overcome this limitation

  10/05/2022

  Read more...

• Backup and restore a K3S cluster

  3 min read

  
  

  If we have a K3S Kubernetes cluster that we want to create a backup of, we can use the k3s etcd-snapshot, but that's just going to backup the information related to Pods and other Kubernetes objects, it won't backup data that resides outside of the cluster such as disks (PersistentVolumes, emptyDirs, ...), or even it's state.

  Having clarified that we are just going to backup some of the data, let's take a look how to do it.

  06/05/2022

  Read more...

• K3s: Upgrade your Traefik ingress controller to version 2

  2 min read

  
  

  If you have K3s' system-upgrade-controller installed you might have noticed how charts appear under /var/lib/rancher/k3s/server/static/charts but your traefik Ingress controller is not being updated:

  # pwd
  /var/lib/rancher/k3s/server/static/charts
  # ls -lrt
  total 104
  -rw------- 1 root root 27292 May 21  2021 traefik-1.81.0.tgz
  -rw------- 1 root root   914 Nov 21 17:19 traefik-crd-9.18.2.tgz
  -rw------- 1 root root 17008 Nov 21 17:19 traefik-9.18.2.tgz
  -rw------- 1 root root   914 Dec  3 07:14 traefik-crd-9.18.201.tgz
  -rw------- 1 root root 17041 Dec  3 07:14 traefik-9.18.201.tgz
  -rw------- 1 root root 17685 Dec 22 19:07 traefik-10.3.001.tgz
  -rw------- 1 root root  7396 Dec 22 19:07 traefik-crd-10.3.001.tgz
  

  27/12/2021

  Read more...

Older content...