3 releases 3 tags

RSS feed

• v0.4.0 1664a08500

  Compare

  v0.4.0 Stable

  mikluko released this 2026-11-02 20:19:51 +00:00 | 0 commits to main since this release

  Added

  • Helm chart oci://sarak.sh/mikluko/charts/kuberex, released at the
    image's version: one Rex server pod with its tailnet settings, the volume
    of /var/lib/rex, a ServiceAccount and an optional CiliumNetworkPolicy
    limiting egress to DNS, the kube-apiserver and outside the cluster.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.3.0 60a8ba7bee

  Compare

  v0.3.0 Stable

  mikluko released this 2026-11-02 20:04:21 +00:00 | 1 commits to main since this release

  Added

  • Rex 0.0.1793645657-gd018d2 from the Rex snapshot apt channel and
    Claude Code 2.1.309-1 from Anthropic's stable apt channel, installed
    in the image.

  Changed

  • Breaking: the container runs as rex (uid 999) and its entrypoint
    starts the Rex server directly; the pod needs no init container, no added
    capabilities, no host user namespace setting and no AppArmor override. The
    server starts on a read-only root filesystem when /run/rex and
    /var/lib/rex are writable.

  Removed

  • Breaking: kuberex install, kuberex run, the overlays at /ov,
    REX_APT_AUTH, REX_VERSION, KUBEREX_PACKAGES and the apt config mount
    at /etc/kuberex/apt/.

  Fixed

  • TS_CONTROL_URL reaches the server; the tailnet node enrolls with that
    control server.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v0.2.0 d34c61db5f

  Compare

  v0.2.0 Stable

  mikluko released this 2026-11-01 06:06:18 +00:00 | 2 commits to main since this release

  Added

  • kuberex install, for an init container, installs Rex from apt into
    overlays on /usr, /etc and /var kept on an emptyDir at /ov.
    REX_APT_AUTH names the file with the rex apt credential (default
    /etc/rex-apt/auth.conf); REX_VERSION pins its version (default newest).
  • KUBEREX_PACKAGES lists apt package specs kuberex install adds after Rex,
    such as claude-code=2.1.309-1.
  • Apt sources and keyrings mounted under /etc/kuberex/apt/sources.list.d/ and
    /etc/kuberex/apt/keyrings/ are added before the install; credentials under
    /etc/kuberex/apt/auth.conf.d/ are used where they are mounted.
  • kuberex run mounts the same overlays and starts the Rex server as rex
    with no capabilities.
  • The server joins a tailnet as TS_HOSTNAME (default kuberex), enrolling
    with the join key in TS_AUTHKEY_FILE on the control server in
    TS_CONTROL_URL (default Tailscale's).
  • git, Go, Node.js, build-essential and openssh-client in the image.

  Changed

  • Breaking: the image is sarak.sh/mikluko/kuberex, published for
    linux/amd64 and linux/arm64.
  • Breaking: the image is built on debian:trixie-20261027 instead of
    machine-debian, without systemd or unbound.
  • Breaking: Rex and Claude Code are no longer in the image; Claude Code
    comes only through KUBEREX_PACKAGES. The pod needs
    hostUsers: false, CAP_SYS_ADMIN, an unconfined AppArmor profile and the
    init container running kuberex install.
  • The rex account has uid and gid 999.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads