finds.dev← search

// the find

mysticaltech/terraform-hcloud-kube-hetzner

★ 3,848 · HCL · MIT · updated Jun 2026

Optimized and Maintenance-free Kubernetes on Hetzner Cloud in one command!

Terraform module that provisions a k3s cluster on Hetzner Cloud using openSUSE MicroOS as the node OS. Targets developers and small teams who want a production-capable Kubernetes setup at Hetzner's aggressive price points without babysitting nodes. The auto-upgrade story (MicroOS rolling updates + Kured reboots + system-upgrade-controller for k3s) is the main differentiator over rolling your own.

MicroOS as the base OS is a genuinely good call — immutable filesystem, BTRFS snapshots with automatic rollback, and SELinux out of the box means a botched update doesn't brick your node permanently. The 190+ Terraform variables give real control without requiring you to fork the module. CNI flexibility (Flannel/Calico/Cilium) with working Cilium XDP and egress gateway examples is more than most similar projects bother with. The etcd S3 backup/restore example is detailed and actually handles the messy bits like clearing old node entries from etcd before rejoining.

The quick-start setup script pipes curl directly to bash with no checksum verification — a supply chain risk that's normalized here but shouldn't be. The packer snapshot step is a manual prerequisite that breaks fully automated provisioning pipelines; if the snapshot is missing or stale, the apply fails without a clear error. Scaling down nodepools has a hard constraint that you must remove from the end of the list only, which will surprise anyone used to normal Terraform resource management and can cause unintended node replacement. The module version is controlled by a string in the user's own kube.tf rather than being pinned in versions.tf, making reproducible deploys depend entirely on user discipline.

View on GitHub →

// want more like this?

We dig through GitHub every week and send a few repos picked for what you actually care about — each with an honest take like this one.

Get finds in your inbox → Search again →