Provision remote machines as k3s nodes over SSH and Tailscale.
npx skills add https://github.com/Kord96/kordinate --skill add-node-kord96
Please help me install this Agent Skill. Skill: add-node Source: https://github.com/Kord96/kordinate/tree/main/agents/charon/skills/add-node Command: npx skills add https://github.com/Kord96/kordinate --skill add-node-kord96
Adds and configures remote machines as k3s nodes without requiring direct LAN access or opening Kubernetes ports, removing the need for manual on-node execution or complex firewall rules by routing cluster traffic over Tailscale's DERP relay.
Run the add-node command with the SSH target and optional cluster name, for example: /add-node [email protected] homelab
High-intent search queries and answers about installing and using this skill.
Add a remote node to a k3s cluster by routing traffic over Tailscale's DERP relay, which removes the need to open Kubernetes port 6443 or require direct LAN access. SSH is used to provision the target machine and join it to the existing control plane.
You can bootstrap a new k3s control plane over Tailscale and SSH by installing the k3s server on the target machine, authenticating with Tailscale, and deploying the standard infrastructure stack using DERP-relayed connections for nodes behind NAT.
Remotely provisioning a k3s node requires SSH access with sudo privileges on the target machine, Tailscale installation with authentication or a preauth key, and access to the k3s node-token on the control plane to authorize the joining node.
Password-based SSH authentication is supported for adding a k3s node through the use of sshpass, allowing remote provisioning when SSH key access is unavailable, provided sudo privileges are still granted on the target machine.
Tailscale DERP relay routes k3s cluster traffic between nodes by establishing encrypted connections that bypass NAT restrictions, allowing remote machines to join the cluster without requiring direct LAN access or complex firewall configurations.
The remote provisioning process is idempotent, meaning it detects existing k3s or Tailscale installations on the target node and skips redundant setup steps, ensuring the node is correctly configured without overwriting current installations.
greenheadHQConfigure SSH keys, ssh-agent loading, Tailscale VPN access and mosh sessions on macOS/NixOS.
VibeTechnologiesDeploy VibeTeam services to a k3s cluster using kustomize overlays.
plurigridManage Tailscale mesh VPN networking with CLI commands for status, SSH, and file transfer.
karmabAutomate Kubernetes cluster deployment and lifecycle management with kcli.
