Work / Side project
A GitOps-managed Kubernetes cluster
Talos Linux on Proxmox, managed entirely through Flux CD, with encrypted secrets and automated image updates.
The setup
A self-hosted Talos Linux cluster running on Proxmox. Everything in it is declared in Git and applied by Flux CD; nothing is changed by hand with kubectl.
What runs it
Cilium for networking, Traefik for ingress, and cert-manager for TLS certificates. Secrets live in the repository encrypted with SOPS and age, so the whole cluster can be rebuilt from Git.
How a deploy happens
CI builds an image and pushes it. Flux image update automation notices the new tag, commits the change to the cluster repository, and reconciles it. A deploy is a Git commit, which means every deploy has a history and can be rolled back.