Skip to content

Rockingham Homelab

A 6-node bare-metal Kubernetes cluster running Talos Linux.

Infrastructure

Terraform that provisions the cluster and the GCP-side resources it leans on, plus the Talos machine configurations applied to each node. Everything past bootstrap is reconciled by ArgoCD.

Architecture decisions

ADRs for the load-bearing choices — thin Terraform plus ArgoCD, Cilium as the unified networking layer, External Secrets Operator against Google Secret Manager, and the rest.

Networking

How traffic gets in and how names resolve: a Cilium L2-announced LB pool on the LAN and split-horizon DNS with AdGuard Home in front of lab.jackhall.dev.

Platform

The cluster-side services Terraform installs before ArgoCD takes over — ArgoCD itself, cert-manager, External Secrets Operator, and local-path-provisioner. See the Platform overview for the bootstrap order and how they interact.

Applications

The ArgoCD-managed addons running in the cluster — AdGuard Home, Homepage, Hubble UI, the lab Gateway, ARC runners, metrics-server. See the Applications index for the full list.

Public by design

These docs are intentionally consumable by a general audience — no secrets, no host-specific credentials.