k3s Single-Node - Verification

k3s service active

PASS

systemctl is-active k3s → active

Node Ready status

PASS

kubectl get nodes → Ready

SELinux Enforcing

PASS

getenforce → Enforcing

firewalld active

PASS

Required ports open (6443, 10250)

Cilium CNI

PASS

cilium status → Ok

Vault Injector

PASS

Pod Running in vault namespace

DNS resolution

PASS

BIND A record resolves

VM created with static IP 10.50.1.100

[x]

SELinux set to enforcing mode

[x]

firewalld active with required ports

[x]

k3s service running and enabled

[x]

Node reports Ready status

[x]

Cilium CNI deployed (Flannel disabled)

[x]

Cilium status reports Ok

[x]

Vault Agent Injector pod running

[x]

Test pod with Vault secret injection

[x]

DNS A record registered in BIND

[x]

Wazuh agent deployed

[x]