k3s-server
| Version | 2026.243.0100 |
| Repo | box/github.com/opencharly/vm-k3s-server:v2026.243.0508 |
A single-node k3s control plane that boots with ServiceLB, Traefik, and local-path-provisioner enabled by default.
Renders /etc/rancher/k3s/config.yaml (admin-only, disabling no
default addons), runs k3s server as a managed service, and
publishes the cluster kubeconfig back to the operator. The
observable proof the control plane came up: a live deploy reaches a
Ready node with Traefik as the default IngressClass and local-path
as the default StorageClass.
Services
Section titled “Services”k3s
Acceptance plan
Section titled “Acceptance plan”This candy’s plan: — the runnable spec charly check executes against a live deployment. check: steps are idempotent probes; run: steps change state.
| Intent | Step |
|---|---|
run |
install the cgroup cpuset pre-start guard the k3s service execs |
run |
install the CRD-establishment wedge healer the k3s service execs after start |
run |
render the k3s server config, adding rootless-userns tolerances under supervisord |
check |
the k3s server config file is rendered with admin-only (0600) permissions |
check |
the k3s control-plane binary the service execs is installed by the required k3s candy |
check |
the cluster reports at least one Ready node |
check |
Traefik, ServiceLB, and local-path addons are all Ready |
check |
Traefik is registered as the cluster’s default ingress class |
check |
local-path is registered as the cluster’s default storage class |
check |
file=/etc/rancher/k3s/config.yaml |
check |
file=/usr/local/bin/k3s |