Kubescape C-0013 Remediation — Tier 1 Follow-up to the baseline scan. C-0013 (“non-root containers”) was the single largest own-app failure category at 47 failed / 14 passed. Before touching any o...

Kubescape Scan Results — 2026-09-24 Initial Kubescape audit of the k3s cluster (see Kubescape for install/usage). This is the baseline scan — first time the cluster’s been run through it — so the ...

Kubescape Open-source Kubernetes security posture scanner from ARMO. Reads workloads, RBAC, and cluster-level objects straight through the current kubeconfig context — no in-cluster agent required...

SQL Server Purpose A standalone Microsoft SQL Server instance, run for MS SQL-specific work alongside the rest of the homelab’s database tooling (PostgreSQL, pgAdmin, DBeaver). Deployment ...

Homelab Infra Purpose Terraform + Ansible + Gitea Actions pipeline meant to spin up an ephemeral, disposable k3s test cluster (Proxmox LXC) on push to an app repo’s test branch, and tear it back ...

CDS Data Pipeline Purpose A scheduled ETL pipeline that moves data between an object store, a message queue, and downstream delivery endpoints — pulling from S3-compatible object storage and Kafk...

Tailscale Tailscale deployed as an exit node and subnet router inside the k3s cluster, giving tailnet devices a path onto the home LAN and out to the internet through the cluster. Runs in its own ...

SFTPGo Self-hosted, multi-protocol file transfer server (SFTP/FTP/FTPS/WebDAV) with a web admin UI, deployed to the default namespace of the k3s cluster. Deployment Item Val...

RustFS Self-hosted, S3-compatible object storage, deployed to the default namespace of the k3s cluster. Deployment Item Value Namespace default ...

Reloader Cluster utility that automatically rolls a Deployment/StatefulSet when a ConfigMap or Secret it references changes. Without it, editing a mounted ConfigMap or Secret doesn’t restart the p...