Add-ons
Add-ons are curated, version-pinned platform features you install into a running cluster. Installs are idempotent (re-run to bump to the latest pinned version) and cost-aware (a dry-run reports the monthly delta).
kubrain addon list # catalogue + what's installed — no token needed
kubrain addon install prod ingress-nginx
kubrain addon install prod cert-manager --issuer-email you@example.com
kubrain addon uninstall prod ingress-nginxCatalogue
| Add-on | Cost | What it gives you |
|---|---|---|
| ingress-nginx | +€3.50/mo (the LB IP) | HTTP(S) ingress controller behind a dedicated public LoadBalancer IP. Required to expose apps over HTTP(S). The IP is the ingress Service’s EXTERNAL-IP. |
| cert-manager | free | Automatic TLS via Let’s Encrypt. Pass --issuer-email; it creates a production letsencrypt ClusterIssuer solving HTTP-01 through ingress-nginx. Give it ~a minute to be ready. |
| metrics-server | free | Resource metrics for kubectl top and HPA. |
| redis | free | In-cluster Redis cache (ClusterIP, no auth, ephemeral). Publishes a redis-auth Secret you wire in with env: {REDIS_URL: {addon: redis, key: url}} — no secret names to memorize. |
Credential-producing add-ons
redis publishes its connection details as a Secret. Reference it from
kubrain.yaml with the addon: sugar — Kubrain
resolves the right namespace/secret/keys for you:
env:
REDIS_URL: {addon: redis, key: url}
# or import all its keys:
envFrom:
- addon: redisUninstall
kubrain addon uninstall <cluster> <addon> is idempotent. Uninstalling
ingress-nginx releases its LoadBalancer IP and stops that charge.