Files
homelab-v/k8s
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
c9d054231e chore(deps): renovate 2025-10-25
chore(deps): update netbird (#408)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium (#411)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v9 (#412)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release kube-prometheus-stack to v77.14.0 (#410)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.13 (#407)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.68 (#404)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#401)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker/login-action action to v3.6.0 (#403)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release node-feature-discovery to v0.18.2 (#409)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/grafana/grafana docker tag to v12.2.1 (#414)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/home-operations/lidarr docker tag to v3 (#425)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release kube-prometheus-stack to v78 (#426)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cert-manager to v1.19.1 (#424)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.47 (#415)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cloudnative-pg to v0.26.1 (#416)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update proxmox-csi-plugin docker tag to v0.3.16 (#417)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.10.0 (#418)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update grafana-operator docker tag to v5.20.0 (#423)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.30.0 (#422)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-25 15:13:54 +02:00
..
2025-10-25 15:13:54 +02:00
2025-10-25 15:13:54 +02:00

Manual bootstrap

CRDs

Gateway API

kubectl apply -k infra/crds

Cilium

kubectl kustomize --enable-helm infra/network/cilium | kubectl apply -f -

Sealed-secrets

kustomize build --enable-helm infra/controllers/sealed-secrets | kubectl apply -f -

Proxmox CSI Plugin

kustomize build --enable-helm infra/storage/proxmox-csi | kubectl apply -f -
kubectl get csistoragecapacities -ocustom-columns=CLASS:.storageClassName,AVAIL:.capacity,ZONE:.nodeTopology.matchLabels -A

Argo CD

kustomize build --enable-helm infra/controllers/argocd | kubectl apply -f -
kubectl -n argocd get secret argocd-initial-admin-secret -ojson | jq -r ' .data.password | @base64d'
kubectl apply -k infra
kubectl apply -k sets

SBOM

  • Cilium
  • Hubble
  • Argo CD
  • Proxmox CSI Plugin
  • Cert-manager
  • Gateway
  • Authentication (Keycloak, Authentik, ...)
  • [] CNPG - Cloud Native PostGresSQL

CRDs

  • [] Gateway
  • [] Argo CD
  • [] Sealed-secrets

TODO

  • Remotely managed cloudflared tunnel
  • Keycloak
  • [] Argo CD sync-wave
commonAnnotations:
    argocd.argoproj.io/sync-wave: "-1"