Files
swaphb 6c79340d9a
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
add environment-specific cilium profiles
2026-08-16 20:04:14 -04:00
..
2026-08-09 19:52:19 -04:00
2026-08-09 19:52:19 -04:00

Local quick start

Prerequisites: Docker, k3d, and kubectl.

Create the cluster and verify all nodes become Ready:

k3d cluster create --config local-quickstart/k3d-cluster-config.yaml
kubectl config use-context k3d-security-baseline
kubectl get nodes -o wide

The config creates one server and two agents and disables the bundled Traefik so later GitOps components own the cluster add-ons explicitly.

To remove the local cluster:

k3d cluster delete security-baseline