Erich Blume
813ce2ddaf
Doc review (last-reviewed 2026-06-04): - cluster.md: k8s v1.34.0→v1.35.0; ringtail workload list updated for the in-progress minikube→k3s migration - ntfy/tempo/alloy: images are now locally-built registry.ops.eblu.me nix containers (v2.19.2 / v2.10.3 / v1.16.0); Fly alloy binary v1.16.1 Service review: - nvidia-device-plugin v0.19.0→v0.19.2 (upstream patch, no breaking changes for our CDI + RuntimeClass manifests) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
53 lines
1.8 KiB
Markdown
53 lines
1.8 KiB
Markdown
---
|
|
title: Cluster
|
|
modified: 2026-06-04
|
|
last-reviewed: 2026-06-04
|
|
tags:
|
|
- kubernetes
|
|
---
|
|
|
|
# Kubernetes Cluster
|
|
|
|
BlumeOps runs two Kubernetes clusters: a Minikube cluster on [[indri]] (most services) and a k3s cluster on [[ringtail]] (GPU workloads, notifications). Both are managed by [[argocd]] on indri.
|
|
|
|
## Cluster Specifications
|
|
|
|
| Property | Value |
|
|
|----------|-------|
|
|
| **Driver** | docker |
|
|
| **Container Runtime** | docker |
|
|
| **Kubernetes Version** | v1.35.0 |
|
|
| **CPUs** | 6 |
|
|
| **Memory** | 11GB |
|
|
| **Disk** | 200GB |
|
|
| **API Server** | https://k8s.tail8d86e.ts.net |
|
|
|
|
**Prerequisites:** Docker Desktop with at least 12GB memory allocated.
|
|
|
|
## Volume Mounting
|
|
|
|
Pods mount NFS directly from [[sifaka|Sifaka]]. Docker NATs outbound traffic through indri's LAN IP (192.168.1.50), allowing access to Sifaka's NFS exports.
|
|
|
|
## Registry Mirror
|
|
|
|
Containerd uses [[zot]] as a pull-through cache at `host.minikube.internal:5050`.
|
|
|
|
Mirrors configured: `registry.ops.eblu.me`, `docker.io`, `ghcr.io`, `quay.io`
|
|
|
|
## K3s on Ringtail
|
|
|
|
Single-node k3s cluster for workloads requiring amd64 or GPU access. See [[ringtail]] for cluster specs, workload list, and secrets management.
|
|
|
|
| Property | Value |
|
|
|----------|-------|
|
|
| **Context** | `k3s-ringtail` |
|
|
| **API Server** | `https://ringtail.tail8d86e.ts.net:6443` |
|
|
| **Workloads** | GPU workloads (Frigate, Ollama), notifications (ntfy, frigate-notify), [[authentik]], and services migrated off indri minikube (Immich, Mealie, Paperless, TeslaMate). See [[ringtail]] for the authoritative list. |
|
|
|
|
Services are being progressively migrated from indri's minikube to ringtail's k3s; the split above reflects an in-progress state, not a fixed boundary.
|
|
|
|
## Related
|
|
|
|
- [[apps|Apps]] - ArgoCD applications
|
|
- [[argocd]] - GitOps deployment
|
|
- [[zot]] - Registry mirror
|