• Use a letsencrypt certificate on Kubernetes with cert-manager and Traefik

    4 min read

    traefik k3s ingress letsencrypt cert-manager

    To be able to automatically request letsencrypt certificates for the TLS-eanble Ingress objects in a kubernetes cluster with the traefik ingress controller we can use the cert-manager controller.


  • Automatically stablish a SSH tunnel to connect to k8s with kubectl

    4 min read

    Kubernetes k3s SSH tunnel

    Kubernetes is a powerful container orchestration platform used by many organizations to deploy and manage their applications. Interacting with a Kubernetes cluster requires configuring the kubeconfig file with the necessary credentials. However, managing these credentials can be challenging, especially in scenarios where a bastion host or SSH tunnel is required.

    With kubectl-tokensshtunnel we can automate the process of creating an SSH tunnel to a remote server and retrieving the Kubernetes credentials from there. This tool simplifies access to remote Kubernetes clusters by securely caching the credentials for a specified duration.


  • Install AWS cloud provider on a k3s cluster

    2 min read

    k3s aws cloud provider load balancer

    One of the drawbacks of installing k3s on a EC2 instance versus using EKS is that we loose the AWS integration, so we cannot use AWS load balancers by default. Thanks to the AWS cloud provider we can overcome this limitation


  • Backup and restore a K3S cluster

    3 min read

    k3s backup restore etcd

    If we have a K3S Kubernetes cluster that we want to create a backup of, we can use the k3s etcd-snapshot, but that's just going to backup the information related to Pods and other Kubernetes objects, it won't backup data that resides outside of the cluster such as disks (PersistentVolumes, emptyDirs, ...), or even it's state.

    Having clarified that we are just going to backup some of the data, let's take a look how to do it.


  • K3s: Upgrade your Traefik ingress controller to version 2

    2 min read

    traefik k3s upgrade

    If you have K3s' system-upgrade-controller installed you might have noticed how charts appear under /var/lib/rancher/k3s/server/static/charts but your traefik Ingress controller is not being updated:

    # pwd
    # ls -lrt
    total 104
    -rw------- 1 root root 27292 May 21  2021 traefik-1.81.0.tgz
    -rw------- 1 root root   914 Nov 21 17:19 traefik-crd-9.18.2.tgz
    -rw------- 1 root root 17008 Nov 21 17:19 traefik-9.18.2.tgz
    -rw------- 1 root root   914 Dec  3 07:14 traefik-crd-9.18.201.tgz
    -rw------- 1 root root 17041 Dec  3 07:14 traefik-9.18.201.tgz
    -rw------- 1 root root 17685 Dec 22 19:07 traefik-10.3.001.tgz
    -rw------- 1 root root  7396 Dec 22 19:07 traefik-crd-10.3.001.tgz



Older content...

From pet to cattle
Treat your kubernetes clusters like cattle, not pets