feat!: Refector directories and flux apps (#559)

ansible/inventory/group_vars/kubernetes/k3s.yml

@@ -0,0 +1,60 @@
+---
+#
+# Below vars are for the xanmanning.k3s role
+# ...see https://github.com/PyratLabs/ansible-role-k3s
+#
+
+# (string) Use a specific version of k3s
+# renovate: datasource=github-releases depName=k3s-io/k3s
+k3s_release_version: "v1.24.8+k3s1"
+
+# (bool) Install using hard links rather than symbolic links.
+k3s_install_hard_links: true
+
+# (bool) Escalate user privileges for all tasks
+k3s_become: true
+
+# (bool) Enable debug logging on the k3s service
+k3s_debug: false
+
+# (bool) Enable etcd embedded datastore
+k3s_etcd_datastore: true
+
+# (bool) Allow the use of unsupported configurations in k3s
+k3s_use_unsupported_config: true
+
+# (string) Control Plane registration address
+k3s_registration_address: "{{ kubevip_address }}"
+
+# (list) A list of URLs to deploy on the primary control plane. Read notes below.
+k3s_server_manifests_urls:
+  # Kube-vip
+  - url: https://kube-vip.io/manifests/rbac.yaml
+    filename: kube-vip-rbac.yaml
+  # Tigera Operator
+  # https://github.com/projectcalico/calico/issues/7003
+  - url: https://raw.githubusercontent.com/projectcalico/calico/v3.24.2/manifests/tigera-operator.yaml
+    filename: tigera-operator.yaml
+  # Prometheus Operator
+  - url: https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.60.1/example/prometheus-operator-crd/monitoring.coreos.com_alertmanagerconfigs.yaml
+    filename: alertmanagerconfigs.yaml
+  - url: https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.60.1/example/prometheus-operator-crd/monitoring.coreos.com_alertmanagers.yaml
+    filename: alertmanagers.yaml
+  - url: https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.60.1/example/prometheus-operator-crd/monitoring.coreos.com_podmonitors.yaml
+    filename: podmonitors.yaml
+  - url: https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.60.1/example/prometheus-operator-crd/monitoring.coreos.com_probes.yaml
+    filename: probes.yaml
+  - url: https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.60.1/example/prometheus-operator-crd/monitoring.coreos.com_prometheuses.yaml
+    filename: prometheuses.yaml
+  - url: https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.60.1/example/prometheus-operator-crd/monitoring.coreos.com_prometheusrules.yaml
+    filename: prometheusrules.yaml
+  - url: https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.60.1/example/prometheus-operator-crd/monitoring.coreos.com_servicemonitors.yaml
+    filename: servicemonitors.yaml
+  - url: https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/v0.60.1/example/prometheus-operator-crd/monitoring.coreos.com_thanosrulers.yaml
+    filename: thanosrulers.yaml
+
+# (list) A flat list of templates to deploy on the primary control plane
+# /var/lib/rancher/k3s/server/manifests
+k3s_server_manifests_templates:
+  - calico-installation.yaml.j2
+  - kube-vip-daemonset.yaml.j2

ansible/inventory/group_vars/kubernetes/os.yml

@@ -0,0 +1,35 @@
+---
+# (string) Timezone for the servers
+# timezone: "America/New_York"
+
+# (list) Additional ssh public keys to add to the nodes
+# ssh_authorized_keys:
+
+fedora:
+  packages:
+    - dnf-plugin-system-upgrade
+    - dnf-utils
+    - hdparm
+    - htop
+    - intel-gpu-tools
+    - ipvsadm
+    - lm_sensors
+    - nano
+    - nvme-cli
+    - socat
+    - python3-kubernetes
+    - python3-libselinux
+    - python3-pyyaml
+
+ubuntu:
+  packages:
+    - hdparm
+    - htop
+    - intel-gpu-tools
+    - ipvsadm
+    - lm-sensors
+    - nano
+    - nvme-cli
+    - socat
+    - python3-kubernetes
+    - python3-yaml

ansible/inventory/group_vars/master/k3s.yml

@@ -0,0 +1,45 @@
+---
+# https://rancher.com/docs/k3s/latest/en/installation/install-options/server-config/
+# https://github.com/PyratLabs/ansible-role-k3s
+
+# (bool) Specify if a host (or host group) are part of the control plane
+k3s_control_node: true
+
+# (dict) k3s settings for all control-plane nodes
+k3s_server:
+  node-ip: "{{ ansible_host }}"
+  tls-san:
+    - "{{ kubevip_address }}"
+  # Disable Docker - this will use the default containerd CRI
+  docker: false
+  flannel-backend: "none" # This needs to be in quotes
+  disable:
+    # Disable flannel - replaced with Calico
+    - flannel
+    # Disable traefik - replaced with ingress-nginx
+    - traefik
+    # Disable servicelb - replaced with metallb and install with Flux
+    - servicelb
+    # Disable metrics-server - installed with Flux
+    - metrics-server
+  disable-network-policy: true
+  disable-cloud-controller: true
+  write-kubeconfig-mode: "644"
+  # Network CIDR to use for pod IPs
+  cluster-cidr: "10.42.0.0/16"
+  # Network CIDR to use for service IPs
+  service-cidr: "10.43.0.0/16"
+  kube-controller-manager-arg:
+    # Required to monitor kube-controller-manager with kube-prometheus-stack
+    - "bind-address=0.0.0.0"
+  kube-proxy-arg:
+    # Required to monitor kube-proxy with kube-prometheus-stack
+    - "metrics-bind-address=0.0.0.0"
+  kube-scheduler-arg:
+    # Required to monitor kube-scheduler with kube-prometheus-stack
+    - "bind-address=0.0.0.0"
+  # Required to monitor etcd with kube-prometheus-stack
+  etcd-expose-metrics: true
+  kube-apiserver-arg:
+    # Required for HAProxy health-checks
+    - "anonymous-auth=true"

ansible/inventory/group_vars/worker/k3s.yml

@@ -0,0 +1,10 @@
+---
+# https://rancher.com/docs/k3s/latest/en/installation/install-options/agent-config/
+# https://github.com/PyratLabs/ansible-role-k3s
+
+# (bool) Specify if a host (or host group) are part of the control plane
+k3s_control_node: false
+
+# (dict) k3s settings for all worker nodes
+k3s_agent:
+  node-ip: "{{ ansible_host }}"