Skip to content

feat: hegerdes kubernetes service#3

Merged
hegerdes merged 57 commits intomainfrom
feat/hks
Mar 1, 2026
Merged

feat: hegerdes kubernetes service#3
hegerdes merged 57 commits intomainfrom
feat/hks

Conversation

@hegerdes
Copy link
Copy Markdown
Owner

@hegerdes hegerdes commented Jan 9, 2026 •
edited
Loading

Hosted Kubernetes inside Kubernetes

All GitOps managed with ArgoCD & Certmanager PKI

@hegerdes hegerdes changed the title a feat: hegerdes kubernetes service Jan 9, 2026
hegerdes added 28 commits January 24, 2026 19:43
@hegerdes
feat: add hks chart
8a67ac8 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): eso secret store ref
4810afc 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat: add demo clusters
335fc7f 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): correct dir name
0cac235 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): correct sync wave for pro job rbac
bec3bdc 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat: add hks shared res
4c408f0 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): correct dir name
54fa92f 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat: add ca singed serving certs to scheduler & controller
eb642a3 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): support extra helm objects
ad702a2 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): ca init rbac
729d8ac 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): encryption conf
0e75080 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): add tls-route
6f6a7af 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): secure deployments
6162017 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): allow to set hks hostname via argo
08caf84 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix: also manage cilium-secrets ns
e9a22e2 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): ha etcd
b9c3a6b 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): etcd cluster conf
5d3799b 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): support etcd backups
7be4288 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): prefix etcd backups with cluster id
e0537bf 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): add hks manager chart
d959ea9 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): add argo appsets for cilium & metrics
ffcec3b 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks) set fsgroup for etcd
dd69e89 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks) set fsgroup for kube-apiserver
fcc30aa 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks) use empty dir for audit-log for now
5352838 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): turn off proxy proto
c31a981 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): debug tls route
fd3cb6c 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
debug(hks): test cilium tls gw
9aeddb6 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat:(hks) add shared conf dir
6812dda 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
hegerdes added 26 commits January 24, 2026 19:43
@hegerdes
fix(hks): use cilium gateway
f71ed0b 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
chore: delete test1 cluster for now
38070f7 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): add cilium gateway
78bb754 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): debug manager
efe713d 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): add kubeadm conf
8f42f8c 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): kubeadm conf rbac
5f8e502 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): kubeadm conf rbac
b56076c 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): add kubelet conf
9b5c0b2 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): add kubeadm node rbac
65b3571 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): add kubeadm node tls rbac
8ad261a 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): set correct coredns params
1f0d766 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): set coredns kube endpoint
9b964ab 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): coredns conf quote
d4645de 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): coredns create serviceaccount
9bbc7cf 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): coredns create serviceaccount
4376b4c 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): coredns extra rbac
4fac0e0 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
fix(hks): set coredns kube endpoint
956b912 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
debug(hks): cordns
1ba51bb 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
debug(hks): cordns
8345d33 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
debug(hks): coredns
4b1f04a 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): add helm template chart
4aaea90 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): inject cluster version to argo secret
e9f3708 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): updates to latest working version
ac5660b 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
deps: bump coredns
a857289 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks): add ip ref to cluster
1e6ed10 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
chore: update gitignore
b44ffba 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat(hks) set cluster advertise address
00343ab 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes
feat: switch to hks docker repo
8ebc11f 
Signed-off-by: Henrik Gerdes <hegerdes@outlook.de>
@hegerdes hegerdes merged commit a70ea1c into main Mar 1, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hegerdes