▲ 34 r/homelabindia+1 crossposts

Networking a 3-Node Kubernetes Homelab with Cilium, Gateway API and Cloudflare Tunnel

Part 2 of my Talos homelab (3 OptiPlex Micros, all control planes). Part 1 got the cluster up, this one is networking.

I moved the running cluster from Flannel + kube-proxy to Cilium without rebuilding it. The default-deny policy that Flannel quietly ignored is now actually enforced, and Hubble shows the drops.

Then I gave it two front doors:

- an internal Gateway on a LAN IP (Cilium LB IPAM, no MetalLB) with a Let's Encrypt wildcard cert, so lab apps get real HTTPS at home

- a public Gateway behind a single Cloudflare Tunnel, so nothing is port-forwarded on the router

An app picks its door with the route's parentRef, which keeps lab stuff from going public by accident.

Write-up with all the manifests and commands: https://blog.prateekjain.dev/networking-a-kubernetes-homelab-cilium-gateway-api-and-cloudflare-tunnel-on-talos-362f548a2f3d?sk=d454cd4eaff4ce8a8fd0cd8e6b3d82f6

Curious if anyone else is using Cilium's Gateway API instead of a separate ingress controller.

u/root0ps — 5 days ago

Giveaway Winner Announcement 🎉

Thanks to everyone who participated in the original giveaway post and shared which certification they’re preparing for.

The winner of the 50% Kubernetes/CNCF certification discount voucher is u/tboww Congratulations! 🎉

I’ll send you a DM shortly with the voucher details. Please respond within 48 hours; otherwise, I’ll select another winner.

Good luck with your certification preparation, and thanks again to everyone who participated!

reddit.com
u/root0ps — 1 month ago

Built a 3-node Talos Kubernetes homelab

I wanted a small environment where I could experiment with the parts of platform engineering that are harder to appreciate in a local single-node cluster, especially networking, HA, failure handling, GitOps, observability, storage, upgrades, and security.

So I built a 3-node bare-metal Kubernetes homelab using Talos Linux on refurbished mini PCs.

The setup includes:

  • 3 control-plane + etcd nodes
  • a shared Kubernetes API VIP for HA
  • DHCP reservations for predictable node IPs
  • per-node Talos machine configs
  • workloads scheduled on the control-plane nodes
  • failure testing by taking a node offline and verifying the API stays reachable

I documented the full setup, including the network design, Talos installation, config generation, bootstrap, validation, workload testing, and HA checks.

Blog: https://blog.prateekjain.dev/building-a-3-node-highly-available-kubernetes-homelab-with-talos-linux-0372066fe49c?sk=4c66cf9181999f9db19ac3aacabcd8e8

I’m planning to use this next for Argo CD, Gateway API, observability, storage, secrets, and more platform-engineering experiments.

Would be interested to know what others here are using for their local platform engineering labs.

u/root0ps — 1 month ago

Built a 3-node Kubernetes homelab with Talos Linux

I recently set up a 3-node Kubernetes homelab on bare metal (on Dell OptiPlex) using Talos Linux, mainly to have a proper environment for learning, testing failures, networking, storage, GitOps, observability, and general Kubernetes experiments.

The setup uses three control-plane/etcd nodes with a shared Kubernetes API VIP, and I documented the full process from network planning and DHCP reservations to Talos installation, per-node configs, bootstrap, workload scheduling, and HA testing.

I’ve written the full guide with commands, screenshots, and the reasoning behind the setup:

Blog: https://blog.prateekjain.dev/building-a-3-node-highly-available-kubernetes-homelab-with-talos-linux-0372066fe49c?sk=4c66cf9181999f9db19ac3aacabcd8e8

If anyone is planning a similar homelab or has questions around Talos, the API VIP, etcd quorum, or the setup in general, happy to help.

u/root0ps — 1 month ago

Built a 3-node Kubernetes homelab with Talos Linux

I recently set up a 3-node Kubernetes homelab on bare metal (on Dell OptiPlex) using Talos Linux, mainly to have a proper environment for learning, testing failures, networking, storage, GitOps, observability, and general Kubernetes experiments.

The setup uses three control-plane/etcd nodes with a shared Kubernetes API VIP, and I documented the full process from network planning and DHCP reservations to Talos installation, per-node configs, bootstrap, workload scheduling, and HA testing.

I’ve written the full guide with commands, screenshots, and the reasoning behind the setup:

Blog: https://blog.prateekjain.dev/building-a-3-node-highly-available-kubernetes-homelab-with-talos-linux-0372066fe49c?sk=4c66cf9181999f9db19ac3aacabcd8e8

If anyone is planning a similar homelab or has questions around Talos, the API VIP, etcd quorum, or the setup in general, happy to help.

u/root0ps — 1 month ago

Built a 3-node Kubernetes homelab with Talos Linux

I recently set up a 3-node Kubernetes homelab on bare metal (on Dell OptiPlex) using Talos Linux, mainly to have a proper environment for learning, testing failures, networking, storage, GitOps, observability, and general Kubernetes experiments.

The setup uses three control-plane/etcd nodes with a shared Kubernetes API VIP, and I documented the full process from network planning and DHCP reservations to Talos installation, per-node configs, bootstrap, workload scheduling, and HA testing.

I’ve written the full guide with commands, screenshots, and the reasoning behind the setup:

Blog: https://blog.prateekjain.dev/building-a-3-node-highly-available-kubernetes-homelab-with-talos-linux-0372066fe49c?sk=4c66cf9181999f9db19ac3aacabcd8e8

If anyone is planning a similar homelab or has questions around Talos, the API VIP, etcd quorum, or the setup in general, happy to help.

u/root0ps — 1 month ago

Detailed guide: Building a 3-node Kubernetes homelab with Talos Linux

A few days ago, I posted my 3-node Talos Kubernetes homelab setup here, and quite a few people reached out through DMs and comments asking for a detailed installation guide.

So I went through the entire setup again from scratch and documented the process properly, including the network setup, DHCP reservations, Talos installation, per-node configuration, Kubernetes API VIP, etcd bootstrap, workload scheduling, validation, and failure testing.

I’ve put everything together in a detailed blog with commands, screenshots, and the reasoning behind the setup.

Blog: https://blog.prateekjain.dev/building-a-3-node-highly-available-kubernetes-homelab-with-talos-linux-0372066fe49c?sk=4c66cf9181999f9db19ac3aacabcd8e8

Please check it out, and if you have any questions about the setup or run into issues while building something similar, feel free to ask.

u/root0ps — 1 month ago
▲ 983 r/minilab+2 crossposts

Detailed guide: Building a 3-node Kubernetes homelab with Talos Linux

A few days ago, I posted my 3-node Talos Kubernetes homelab setup here, and quite a few people reached out through DMs and comments asking for a detailed installation guide.

So I went through the entire setup again from scratch and documented the process properly, including the network setup, DHCP reservations, Talos installation, per-node configuration, Kubernetes API VIP, etcd bootstrap, workload scheduling, validation, and failure testing.

I’ve put everything together in a detailed blog with commands, screenshots, and the reasoning behind the setup.

Blog: https://blog.prateekjain.dev/building-a-3-node-highly-available-kubernetes-homelab-with-talos-linux-0372066fe49c?sk=4c66cf9181999f9db19ac3aacabcd8e8

Please check it out, and if you have any questions about the setup or run into issues while building something similar, feel free to ask.

u/root0ps — 1 month ago
▲ 27 r/devops

My 3-month journey to becoming a Kubestronaut

I recently completed the full Kubestronaut certification path after roughly three months of focused preparation.

After completing it, quite a few people reached out asking about the order I followed, the resources I used, and how I prepared for each exam, so I decided to put everything together in one detailed blog rather than answering the same questions separately.

For KCNA and KCSA, my preparation was fairly straightforward and mainly consisted of the KodeKloud courses, KodeKloud notes, and practice tests, while CKAD, CKA, and especially CKS required much more hands-on practice with labs, mock exams, and repeated work on weaker areas.

I’ve also included links to my dedicated CKAD, CKA, and CKS exam-experience posts for anyone who wants a deeper breakdown of those exams.

Full 3-month Kubestronaut journey:
https://medium.com/@prateekjain.dev/my-3-month-journey-to-becoming-a-kubestronaut-c722c4a7cf75?sk=eb78b3ef703262f787f746cc6969d8f1

Hopefully this helps anyone currently working towards the Kubestronaut path. Happy to answer questions about the preparation or any of the five exams.

u/root0ps — 1 month ago
▲ 316 r/workstations+3 crossposts

My workstation + gaming + homelab setup

Been slowly putting this setup together and it has somehow turned into a mix of a work desk, gaming setup, and homelab.

The main machine is currently running Omarchy and handles most of my personal development, homelab management, and gaming.

Main PC

  • AMD Ryzen 9 9950X3D
  • NVIDIA RTX 5070 Ti
  • MSI MAG X870E Tomahawk WiFi
  • 64GB Patriot Viper Venom RGB DDR5-6000 CL30
  • Crucial T500 2TB Gen4 NVMe
  • Corsair Nautilus 360 RS ARGB AIO
  • MSI MAG A850GL PCIe 5.0 850W 80+ Gold PSU
  • MSI MAG PANO 100R PZ case

Displays / work / gaming setup

  • LG 32" 4K 60Hz as the main display — company provided, so I have no idea what the exact model is 😅
  • BenQ 27" 1080p 75Hz in portrait mode
  • 2023 MacBook Pro with M2 Pro — company machine
  • AULA F75 Max keyboard
  • Logitech MX Master 3S for Mac
  • iPad Pro 11" 2021
  • GameSir Cyclone 2 controller
  • Soundcore Q20i headphones

And then there is the little cluster sitting on the right.

Homelab

  • 3× refurbished Dell OptiPlex 3070 Micro
  • Intel Core i5-8500T in each
  • 8GB DDR4 each
  • 256GB SATA SSD each
  • 1GbE networking

Naturally, I couldn't just call them node-1, node-2 and node-3:

  • Optimus
  • Bumblebee
  • Ratchet

Together they form a 3-node bare-metal Talos Linux Kubernetes cluster called cybertron. Networking is currently handled by a Tenda AC10. Nothing fancy, but for three 1GbE nodes and a management workstation it has been good enough so far.

u/root0ps — 2 months ago

Built a little Kubernetes widget for Omarchy

Been using Omarchy recently and decided to make something for the Kubernetes nerds here.

I built a small desktop widget (with Codex, obviously) that shows the status of my K8s cluster at a glance, CPU and memory usage, pods, nodes, workloads, cluster health, and API server latency.

Still experimenting with what else would be useful to show. Thinking about adding things like namespace-level usage, unhealthy pods, restarts, and maybe alerts.

u/root0ps — 2 months ago

Starting my homelab journey with a 3-node Talos Kubernetes cluster

https://preview.redd.it/vazc36hybbmh1.png?width=4456&format=png&auto=webp&s=5b8466b39e154fe136b6fa1a4e5b559d53235aa3

Finally starting my homelab journey!

Set up a 3-node Kubernetes cluster running Talos Linux, with all three nodes currently acting as control-plane nodes.

Machines: 3 × Mini PCs (Optiplex 3070), each with 6-core CPU, ~8 GB RAM and 256 GB SSD storage.

What should I install first? Any must-have tools or services you’d recommend for a Kubernetes homelab?

reddit.com
u/root0ps — 2 months ago

Finally got my Kubestronaut badge: giving away a 50% exam voucher

https://preview.redd.it/c1ojduflg9mh1.png?width=800&format=png&auto=webp&s=ac79b369bc64a8ad056b65d4c310dc6391fcc636

Just received my official Kubestronaut badge!

This sub has been really helpful throughout the certification journey, so I’d like to give something back.

I have one 50% discount voucher that I’d like to give away to someone preparing for their next Kubernetes/CNCF certification.

If you’re interested, just leave a comment below mentioning which certification you’re preparing for.

I’ll pick someone from the comments and do the giveaway next week.

Good luck with your prep!

reddit.com
u/root0ps — 2 months ago
▲ 561 r/minilab+2 crossposts

Building my first 3-node homelab with refurbished Dell OptiPlex 3070 Micros

I’m putting together a small 3-node homelab mainly for Kubernetes/Talos, containers, networking experiments, and some HA/storage testing/practice.

Here're the specifications:

- Intel Core i5-8500T
- 8GB DDR4 RAM
- SK hynix 8GB DDR4-2666
- 1×8GB
- New EVM 256GB 2.5” SATA SSD
- Wi-Fi + Bluetooth
- Original adapter
- 1 year warranty

u/root0ps — 1 month ago

Back to Omarchy after 6 months

I used Omarchy late last year for a few months but had to move to Windows, but installed Omarchy last night, dual-booted it with Windows. I’ve been running dual-booted systems for more than 10 years now, but the installation experience was never this smooth.

One more thing I fell in love with is that all my Windows Steam and Epic Store games are synced on Omarchy. One of the best features is native AI integration; now I won't have to install Warp terminal separately.

u/root0ps — 2 months ago
▲ 73 r/devops

Officially a KubeAstronaut Now

Just passed the KCSA exam and officially became a Kubestronauts!

If anyone is preparing for KCSA or any other exam and has questions, feel free to ask.

​edit: Reddit titles are permanent, spelling mistakes are forever 🫠

reddit.com
u/root0ps — 2 months ago

CKS Exam Experience 2026: What Helped, What Didn’t, and the Mistake That Cost Me Time

https://preview.redd.it/qzotj3kgx9kh1.png?width=1246&format=png&auto=webp&s=d399d023247591e1f99eebdd0128cf1b6bfb0151

Today, I passed CKS with 75% (not a good score) and wrote a detailed blog about my exam experience, preparation approach, the resources I used, and the Kubernetes security topics that helped me the most.

DMs are open if you are preparing for the exam. I can help with whatever is still fresh in my memory.

My biggest takeaway: CKS is noticeably harder than CKAD and CKA. It is not only about knowing Kubernetes commands. You need to understand why a configuration is insecure, how to fix it, and how to verify that your change actually worked.

The biggest mistake I made was spending around 10–15 minutes too long on one question because I felt I was close to solving it. That created unnecessary pressure towards the end and probably led to a couple of avoidable mistakes.

So my strongest advice is: if you are stuck and don’t see a clear path after a few minutes, mark the question and move on.

A few things that helped me:

Don’t memorise solutions. Understand the security reasoning behind them. If a NetworkPolicy, API server flag, securityContext, audit policy, or admission control changes slightly, memorised YAML will not help much.

Always verify your work. Security changes can easily break workloads or cluster components. Check Pods, control-plane components, logs, services, NetworkPolicy connectivity, admission behaviour, audit logs, node readiness, and systemd services wherever required.

Be comfortable with Linux as well as Kubernetes. CKS can require you to work with configuration files, systemd services, container runtimes, permissions, certificates, and node-level settings.

Use documentation whenever required instead of trying to remember every flag or custom resource.

Topics I would strongly recommend practicing:

  • Kubelet and etcd hardening
  • kube-apiserver authentication and authorization
  • Admission controls and ImagePolicyWebhook
  • Secure Dockerfiles and non-root containers
  • Container immutability and securityContext
  • Audit policies and API server logging
  • NetworkPolicy
  • HTTPS Ingress and TLS
  • ServiceAccount token security
  • Worker node administration and upgrades
  • SBOM and software supply-chain security
  • Restricted Pod Security Standard
  • Docker/container runtime hardening
  • Istio STRICT mTLS
  • Cilium network security
  • CIS benchmarks and kube-bench remediation

Resources I used:

  • KodeKloud CKS course
  • KodeKloud Ultimate Mock Exam Series
  • iximiuz Labs
  • KillerKoda
  • Killer[.]sh  CKS simulator
  • ChatGPT/Claude for topics that needed a simpler explanation or extra practice scenarios

Between the KodeKloud course mocks and Ultimate Mock Exam Series, I had around six mock exams. I found them very useful and reasonably close to the level of difficulty you should prepare for.

Killer

[.]sh felt a little off-track compared with the actual exam in some areas, but I would still recommend doing it. It is useful for practicing under time pressure, discovering knowledge gaps, and improving troubleshooting skills.

I also used ChatGPT and Claude quite a lot during preparation. CKS has many small security topics, and sometimes a course or lab explanation may not immediately click. In those cases, asking AI to explain the concept differently, compare configurations, or generate a small practice scenario was very useful.

The simplest advice I can give is: practice a lot, understand the security reasoning behind what you are doing, verify every change, and don’t let one difficult question consume your exam time.

I also wrote a full blog with more details on my preparation strategy, resources, task areas, mistakes, and lessons from the exam.

Blog: https://blog.prateekjain.dev/cks-exam-experience-2026-preparation-strategy-and-lessons-learned-1fad785a430b?sk=52b58a9c6d812444bc1340f15eda7dd6

reddit.com
u/root0ps — 2 months ago