100 Commits
Author SHA1 Message Date
Devin Buhl e895ba359f chore: mention external-dns in the README
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-29 12:18:27 -04:00
Devin Buhl 36f8a6c17b chore: improve apply-config task and update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-29 10:58:40 -04:00
Devin Buhl a8f4b51b7f chore(scripts): format kubeconform script
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-29 10:34:41 -04:00
Devin Buhl fe0252bff0 fix(talos): update sysctls
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-29 10:19:50 -04:00
Devin Buhl 3e122b90fa feat(talos): add kube scheduler default topologyspreadcontraints
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-29 10:19:36 -04:00
Devin Buhl 50b6f98dd7 feat(cilium): loadbalancer mode default to dsr and allow configurability
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-17 08:44:35 -04:00
Devin Buhl df74ade69a chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-10 12:14:30 -04:00
Devin Buhl fd4f7643fa chore: update dev/null redirects
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-10 12:11:46 -04:00
Devin Buhl 88996d0824 fix: updates to talos taskfile and readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-10 12:09:10 -04:00
Devin Buhl 643e682982 fix(devcontainer): does arm64 build now question mark
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-06 09:55:30 -04:00
Devin Buhl c6528ce3b9 fix(devcontainer): add docker pull to init cmd
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-06 09:42:24 -04:00
Devin Buhl f2de4c7fab fix: remove retryInterval from all flux ks
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-10-03 10:03:24 -04:00
Devin Buhl cffd5b323e fix(reloader): use OCI helm repo
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-06-12 07:07:04 -04:00
Devin Buhl 9524e417ae fix(cilium): remove deprecated containerRuntime enable Talos forwardKubeDNSToHost
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-06-10 15:09:04 -04:00
Devin Buhl 6fd9c17bb7 fix: add dir back into other talos tasks
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-06-03 20:19:37 -04:00
Devin Buhl d566efbb5c fix: improve talos taskfile and add upgrade docs to README.md
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-31 09:05:27 -04:00
Devin Buhl 67ed0a4f19 fix: improve talos taskfile and add upgrade docs to README.md
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-31 08:23:32 -04:00
Devin Buhl 56e501838b fix: update default bootstrap_schematic_id var
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-27 10:43:28 -04:00
Devin Buhl 0dfd4f5dd8 fix: update bgp peer port logic
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-27 09:27:12 -04:00
Devin Buhl 95a1b30ff2 feat: use DoH for cert-manager nameservers
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-23 12:19:12 -04:00
Devin Buhl 1a32b61101 fix: no more relative paths in talos taskfile
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-23 11:56:33 -04:00
Devin Buhl c1af3dbb4c fix: move helmfile up a directory
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-23 11:15:36 -04:00
Devin Buhl 18dfe45662 fix: clean up replica counts across apps
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-23 09:49:16 -04:00
Devin Buhl 452398dc32 chore(talos): update formatting in talconfig
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-22 15:14:04 -04:00
Devin Buhl 37b8e39535 chore(talos): update formatting in helmfile
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-22 10:04:05 -04:00
Devin Buhl 74477840dd fix: update cluster-settings and cluster-secrets files
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-22 09:57:11 -04:00
Devin Buhl fdd02f4189 fix: only build devcontainer for amd64
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-21 11:51:27 -04:00
Devin Buhl c9a6d68606 chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-21 11:24:53 -04:00
Devin Buhl b18319c286 chore: update devcontainer install script
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-21 10:47:21 -04:00
Devin Buhl 3f6fc9cb7d chore: build devcontainer once a day to ensure radness
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-21 10:37:01 -04:00
Devin Buhl 25d353b0ce fix: update taskfiles and renovate config
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-21 10:30:33 -04:00
Devin Buhl ca861b2e5c fix: remove bcrypt and passlib pip dep
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-05-21 08:42:07 -04:00
Devin Buhl ad1d09f43c chore: update config sample to make it clear what github address should look like
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-21 08:43:34 -04:00
Devin Buhl 6d0df5c57d fix(cilium): set default loadBalancer to snat
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-19 14:51:36 -04:00
Devin Buhl 896598fa79 fix(talos): update k8s to v1.29.4
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-18 16:10:49 -04:00
Devin Buhl 2601f18d90 fix: cilium not exclusive CNI, remove ingress tls block and use defaultPodOptions in app-template workloads
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-17 17:12:49 -04:00
Devin Buhl f37a8381ec fix: update validation script for cloudflare tools check
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-14 14:50:32 -04:00
Devin Buhl 22ad47418f feat: drop support for web/dashboard created cloudflare tunnel
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-14 14:47:00 -04:00
Devin Buhl 914ecadbd3 fix(taskfile): add warnings if KUBECONFIG and SOPS Age are not the expected values
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-05 15:32:40 -04:00
Devin Buhl 79b3de005e chore: housekeeping
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-05 15:08:47 -04:00
Devin Buhl b3fc170b8c fix(external-dns): update to 1.14.4 and adjust CRD
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-05 11:25:11 -04:00
Devin Buhl 35df2fb0f7 fix: add talos_nic validation
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-03 14:27:39 -04:00
Devin Buhl 28ae26d3a8 fix: add sysctls for cloudflared
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-02 20:01:45 -04:00
Devin Buhl b6234fcbad fix(spegel): moved to new github org and new update
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-04-01 17:56:49 -04:00
Devin Buhl 94cffb45e3 feat: add a few more config validations
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-03-26 08:48:46 -04:00
Devin Buhl 22e7e30918 chore: update config sample
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-03-25 12:34:08 -04:00
Devin Buhl deb038915a fix: specify talhelper secret file
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-03-22 08:32:29 -04:00
Devin Buhl 8610430e95 fix: remove some config to keep things simple
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-03-19 07:59:45 -04:00
Devin Buhl cadee91bdc fix: rename talhelper secret to talsecret.sops.yaml
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-03-07 10:41:27 -05:00
Devin Buhl dff0eb75ac fix: keepHistory is false by default
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-03-06 08:26:49 -05:00
Devin Buhl d2f2b85c6b fix(kube-vip): actually remove the option completely
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-12 18:55:47 -05:00
Devin Buhl 9f45079713 feat: rename ansible hosts groups to controllers and workers
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-03 18:03:11 -05:00
Devin Buhl 2c62c13905 fix: update flux taskfile to not check if installed
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-02 20:12:57 -05:00
Devin Buhl 6756f29ecb chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 20:42:03 -05:00
Devin Buhl acb86f2e35 fix: create flux-system namespace when using private GH repo
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 20:40:01 -05:00
Devin Buhl cba35dc66a feat: add image-gc to k0s and talos kubelet options
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 17:01:30 -05:00
Devin Buhl 73bd9fabad feat: add image-gc to talos kubelet options
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 16:55:55 -05:00
Devin Buhl 7e8870ccf1 chore: housekeeping
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 16:30:59 -05:00
Devin Buhl ceeaba0ea0 feat: swap echo-server image to mendhak/http-https-echo
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:34:16 -05:00
Devin Buhl 90897f2d2e fix: update echo-server securityContext
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:22:41 -05:00
Devin Buhl e85cd4d644 fix: update SUC tolerations
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:19:54 -05:00
Devin Buhl 61d7806f18 fix: add security contexts to SUC
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:17:55 -05:00
Devin Buhl a2ce911a18 fix(talos): do not render worker config when no workers
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 17:32:52 -05:00
Devin Buhl bc9f676c0f chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 15:25:56 -05:00
Devin Buhl 6798fd359d chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 15:10:26 -05:00
Devin Buhl ef563a4472 feat: add prevent downgrades check in k3s ansible
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 14:33:16 -05:00
Devin Buhl 19308f0783 chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:25:00 -05:00
Devin Buhl 1be8ceffa8 feat: update SUC dirs - drink coffee before trying to do a PR
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:23:30 -05:00
Devin Buhl e22a69f6f2 chore: add support for renovating SUC
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:18:50 -05:00
Devin Buhl 2267494b98 feat: add SUC for talos and k3s and move schematics to cluster.nodes.talos
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:10:46 -05:00
Devin Buhl 5fa8b9685a fix: update k0s and k0s scripts
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 15:58:56 -05:00
Devin Buhl 5d29ec7f12 chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 10:12:52 -05:00
Devin Buhl 138e0aa832 chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 10:12:30 -05:00
Devin Buhl b9d164ff9b chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 10:00:40 -05:00
Devin Buhl 1e731e0a8e chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 09:28:47 -05:00
Devin Buhl 9ea2b4f7c4 chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 09:27:52 -05:00
Devin Buhl c9375f2b05 fix: only run kubeconform when flux
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 08:18:30 -05:00
Devin Buhl 7d9219e627 chore: update config sample
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-28 14:36:44 -05:00
Devin Buhl e4427a8325 fix: update kubeconform script location and fix github workflow
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-27 17:09:55 -05:00
Devin Buhl ab93b0e44e chore: update vars gitignore file
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-26 07:51:12 -05:00
Devin Buhl 34a21a37ea chore: slight tweaks to task:workstation-generic
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-26 06:56:36 -05:00
Devin Buhl 0643c483bd feat: add workstation:generic-linux and update devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-25 20:36:04 -05:00
Devin Buhl 7436eb43ce chore: update renovate config and annotations
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-25 18:39:54 -05:00
Devin Buhl 59b896fa33 chore: update renovate config to fix migrations
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-24 19:27:25 -05:00
Devin Buhl b5a1a2fe79 chore: add direnv whitelist directory to devincontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-24 15:52:38 -05:00
Devin Buhl 9d175fcc99 chore: improve arch taskfile and update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-24 09:27:39 -05:00
Devin Buhl 9f2d6a9970 feat: more ricing to the devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-24 09:04:29 -05:00
Devin Buhl 40aeae150d chore: update workstation section in readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 19:45:58 -05:00
Devin Buhl e6783b3c12 feat: even more ricing of the devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-24 00:23:12 +00:00
Devin Buhl b9575ad14f feat: more ricing to the devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 18:58:46 -05:00
Devin Buhl a16b347c54 feat: devcontainer properly hooks starship and direnv now
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 16:23:20 -05:00
Devin Buhl 0a31eecd6e feat: add starship to devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 15:42:17 -05:00
Devin Buhl 3a646eec30 arm64 devcontainer builds still no work
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 17:40:11 +00:00
Devin Buhl 3682419826 maybe arm64 devcontainer builds work now
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 17:36:26 +00:00
Devin Buhl c7ea5e8e35 feat: add gh cli to devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 11:16:22 -05:00
Devin Buhl 14105bb5ac fix: remove devcontainer arm64 builds
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 11:07:02 -05:00
Devin Buhl 95d2a721f6 fix: devcontainer arm64 builds
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 10:38:40 -05:00
Devin Buhl 8860565d25 chore: update devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 08:50:42 -05:00
Devin Buhl eafde69a7e chore: update devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 08:37:04 -05:00
Devin Buhl 634e98c6ed chore: update devcontainer
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 08:08:52 -05:00