Homelab: Cluster Architecture

• rpi_docker_home_server

  1 6 0.0 Perl

  Docker Private Docker Home Server for Raspberry Pi

I started out the process by thinking about what I wanted to use the home lab for. I was originally inspired by a blog post I had read about setting up a raspberry pi home lab which set up DNS, OpenLDAP, and NextCloud. I knew similarly that I wanted to have a centralized system for identity management and a place to store files. As a developer who sometimes works on personal projects, I also wanted a local network playground for any personal services I build.

• helm-charts

  6 596 5.0 Mustache

  A curated set of Helm charts brought to you by codecentric (by codecentric)

  

Having experienced the issue of identity management in past projects (I've literally published 5 web apps which became some iteration of user-profile applications), I found Keycloak to be of particular use when it comes to managing users and federating accounts. Keycloak is an open-sourced enterprise service which manages identity, authentication, authorization, and account federation which is part of the JBoss project and backed by RedHat. Since I wanted to use the Keycloak helm chart the Keycloak service runs using a Postgres backend.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• k3s-home-cluster

  1 2 0.0 HCL

  Sets up a Kubernetes cluster using Ansible

I published the cluster set-up into an Ansible playbook on GitHub

• bank-vaults

  10 0 0.0 Go

  Discontinued A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).

  

• logging-operator

  7 1,485 9.7 Go

  Logging operator for Kubernetes

  

Logging Operator Helm Chart - https://github.com/banzaicloud/logging-operator

• oauth2-proxy

  98 8,632 9.0 Go

  A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

  

Oauth2-proxy is a project which provides an authentication and authorization intercept to services where you want to protect pages. Oauth2-proxy leverages the OAUTH2 protocol to delegate authentication. Oauth2-proxy also allows custom configuration for identity management services such as Keycloak.

• faas-netes

  5 2,101 9.3 Go

  Serverless Functions For Kubernetes

  

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• charts

  88 8,391 10.0 Smarty

  Bitnami Helm Charts (by bitnami)

  

OwnCloud Helm Chart - https://github.com/bitnami/charts/tree/master/bitnami/owncloud

• k3s

  291 26,405 9.6 Go

  Lightweight Kubernetes

  

I had decided that it was time to pick up a new skill. At the time there was a goal at work to transition our infrastructure from using AWS Elastic Container Service (ECS) to an internal managed Kubernetes-based platform. Having only dabbled in Kubernetes I wanted to know more. I set out to build a home-lab using Kubernetes (k3s). It took me about 6 months to reach a point where I was comfortable with what I had built.

Suggest a related project