Skip to content
SYS.DOCS // DOCS

Hetzner Cloud Integration

Edka leverages Hetzner Cloud’s infrastructure to provide cost-effective, high-performance Kubernetes clusters. This integration enables you to deploy production ready clusters with enterprise features at a fraction of the cost of major cloud providers.

  • 70% lower costs compared to AWS, Azure, or GCP
  • Transparent, predictable pricing with no hidden fees
  • No egress charges for traffic
  • Competitive storage pricing
  • 100% NVMe SSD storage on all servers
  • AMD EPYC or Intel Xeon processors
  • 10 Gbit/s network connectivity
  • Low latency with data centers in Europe, USA and Asia
  • 99.9% uptime SLA for servers
  • ISO 27001 certified data centers
  • DDoS protection included
  • Redundant network infrastructure
  1. Create a Hetzner Cloud Account

    • Visit Hetzner Cloud
    • Sign up and verify your account
    • Add payment method (credit card or PayPal)
  2. Create a Project

  1. Navigate to your project in Hetzner Console
  2. Go to Security > API Tokens
  3. Click Generate API Token
  4. Configure token:
    • Description: “Edka”
    • Permissions: Read & Write
  5. Copy the token and store it securely (shown only once)

Edka uses a unique Hetzner token per cluster. You can store a token on each cluster or use a temporary token for one-off operations. The account-level integration in Settings > Integrations > Hetzner (Legacy) remains available for quick testing and development purposes without always having to provide a token.

  1. In Edka dashboard, go to Clusters and open your cluster
  2. Navigate to Settings > General
  3. Under Hetzner API Token, click Set Token or Update Token
  4. Enter your API token and click Save

Edka will:

  • Encrypt and securely store your token for that cluster
  • Use it for all operations on that cluster
  • Validate the token and available resources

Only the cluster owner and organization owners/admins can set, update, or remove a stored cluster token after the cluster has been created.

  1. During cluster creation or when prompted for a cluster operation, select Use temporary token
  2. Provide the token for the operation
  3. Token is not stored, only used for the current operation

Note: Temporary tokens require re-entering for every cluster operation.

If your cluster was created with the legacy integration, you can continue using it:

  1. Go to Settings > Integrations > Hetzner (Legacy)
  2. Manage the legacy token there

For new clusters, use a cluster token instead (recommended).

TypeArchvCPUsRAMStorageTraffic (EU)Notes
CPX11x8622GB40GB20TBEntry dev/test
CPX21x8634GB80GB20TBSmall apps
CPX31x8648GB160GB20TBGeneral purpose
CPX41x86816GB240GB20TBProduction
CPX51x861632GB360GB20TBHigh-traffic
CAX11arm24GB40GB20TBARM cost-optimized
CAX21arm48GB80GB20TBARM general
CAX31arm816GB160GB20TBARM performance
CAX41arm1632GB320GB20TBARM heavy workloads
CX22x8624GB40GB20TBLegacy shared
CX32x8648GB80GB20TBLegacy shared
CX42x86816GB160GB20TBLegacy shared
CX52x861632GB320GB20TBLegacy shared
TypevCPUsRAMStorageTraffic (EU)Notes
CCX1328GB80GB20TBDatabases/systems
CCX23416GB160GB20TBApps/databases
CCX33832GB240GB30TBCompute intensive
CCX431664GB360GB40TBHigh performance
CCX5332128GB600GB50TBLarge workloads
CCX6348192GB960GB60TBEnterprise scale

Note: Included traffic varies by location. EU locations (nbg1, fsn1, hel1) have higher included traffic than US (ash, hil) and Singapore (sin).

  • Nuremberg (nbg1): Germany, lowest latency for Central Europe
  • Falkenstein (fsn1): Germany, excellent connectivity
  • Helsinki (hel1): Finland, ideal for Northern Europe
  • Ashburn (ash): Virginia, East Coast coverage
  • Hillsboro (hil): Oregon, West Coast coverage
  • Singapore (sin): Singapore, ideal for Asia-Pacific region

Edka automatically provisions Hetzner Load Balancers for:

  • Gateway API controllers
  • Ingress controllers
  • High-availability control planes (coming soon)
  • Service type LoadBalancer

Load Balancer types:

  • LB11 up to 10,000 connections
  • LB21 up to 20,000 connections
  • LB31 up to 40,000 connections

By default, Edka provisions a LB11 load balancer for Gateway API and ingress controllers in proxy mode.

Specifications:

  • Size: 10GB to 10TB
  • Performance: Up to 7,500 IOPS
  • Throughput: Up to 300 MB/s
  • Resize: Online expansion supported

Use Cases:

  • Persistent volumes for databases
  • Application state storage
  • Dedicated storage for your deployments

Private Networks:

  • CIDR: Custom IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16)
  • Subnets: Multiple subnets per network
  • vSwitch: Connect to bare metal servers