K3s

Kubernetes secrets are not actually safe to store on git. it is just base64 encoded. sealed secrets are encrypted with a key pair.

How to attach TLS certificate to K3s ingress using let’s encrypt and dns-01 challlenges. Also, how to attach TLS certificate using Cloudflare Origin CA with proxied to Cloudflare Network

How to expose K3s container service to outside using LoadBalancer. There are two options, using K3s default LoadBalancer Klipper or MetalLB which is well known for on-premise LoadBalancer.

How to download docker credentials from AWS ECR and inject to K3s cluster.

How to Access K3s cluster with kubectl from outside. To issue kubeconfig credential to access K3s API server.

How to initially setup K3s cluster and setup Terraform for K3s nodes.