infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,236 Commits 41 Branches 0 Tags
0fcff061db8255e26c82bb7b17a19e3eecbe6ad8
Commit Graph
100 Commits
Author SHA1 Message Date
Devin Buhl d3c547a20d fix: set replicas to 1 on cilium operator 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-11 13:23:22 -04:00
Devin Buhl 4fbcba348f fix(ansible): in the case of cluster-installation playbook failure still clean up helmchart resources on next run 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-10 13:33:20 -04:00
Devin Buhl 965a294943 fix: Cilium l2announcements lease config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-07 09:15:16 -04:00
Devin Buhl ff5e52559b fix: set coredns label override and service name 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 18:06:48 -04:00
Devin Buhl 14d72ae55a fix(ansible): use localhost when getting repository path for kubeconfig 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 09:08:50 -04:00
Devin Buhl fe41cf6ea5 feat: move kubernetes dir into templates to support jinja2 across all files (#831) 2023-07-05 21:17:10 -04:00
Devin Buhl 7b0a154fed fix(ansible): keep apparmor installed but mask the service 
Also add task back in for updating `/etc/hosts` since hostname doesn't change this file
 2023-07-05 18:49:18 -04:00
Devin Buhl 0df7ec6526 feat!: debian 12 to the moon (#830) 2023-07-05 10:36:05 -04:00
Devin Buhl b714540000 fix: coredns is part of the docker oss program and not rate limited 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-05 08:27:28 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin Buhl fd1590efcc fix: actually deploy custom-cilium-l2.yaml.j2 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 18:00:15 -04:00
Devin Buhl 9cd26e9d11 feat: manage the cilium l2 config with flux (#827) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 17:01:36 -04:00
Devin Buhl b0b54b31b0 fix: use fqcrdname for resource readiness 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:57:13 -04:00
Devin Buhl 315659d196 chore: update requirements and stale container service 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:24:31 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822) 
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
 2023-07-04 11:36:58 -04:00
Devin Buhl 467af18b0f feat!: Drop Metallb in favor of Cilium L2Announcements (#821) 2023-07-03 14:47:51 -04:00
Devin Buhl 4905990750 fix(ansible): forgot to rename this file 2023-07-03 13:11:29 -04:00
Devin Buhl 46d68b8d95 feat(ansible): Deploy coredns with HelmChart instead of builtin method and other small QoL changes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-03 11:30:13 -04:00
renovate[bot] df96293874 fix(ansible): update community.sops to 1.6.4 (#811) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-03 07:58:16 -04:00
renovate[bot] 2053913767 fix(github-release): update k3s-io/k3s to v1.27.3+k3s1 (#812) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-03 07:58:10 -04:00
Devin Buhl 1be064692d feat: Keep kube-vip-rbac and delete stale addon resources 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 17:56:29 -04:00
Devin Buhl 6442ac02cf feat(ansible): remove dep cilium-cli and update nuke playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 11:33:54 -04:00
Devin Buhl 3dcec5faaa feat(ansible): Add stale container weekly systemd timer 2023-07-01 11:18:25 -04:00
Devin Buhl 8d67a5988b fix: do not manage Foreign Routes or Foreign Routing Rules 2023-07-01 08:09:02 -04:00
Alex LehmanandDevin Buhl 54bbcdb816 Check if ufw is installed before attempting to disable it (#807) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-06-25 09:21:18 -04:00
renovate[bot]andDevin Buhl bb9168eb17 feat(container)!: Update image kube-prometheus-stack to v47 (#804) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-06-20 19:28:27 -04:00
renovate[bot] 05d5ae0444 feat(ansible): update community.general to 7.1.0 (#803) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-06-20 19:25:51 -04:00
renovate[bot] 9651e15d0a fix(helm): update chart cilium to 1.13.4 (#799) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-06-17 08:21:36 -04:00
Devin Buhl adf08cb348 fix: renovate the k3s cilium helm chart 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:13:42 -04:00
Devin Buhl 746f49e028 fix(ansible): only run certain tasks on k3s_primary_control_node 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 07:48:59 -04:00
renovate[bot] de7a73f0ec fix(ansible): update community.sops to 1.6.2 (#793) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-06-17 06:57:14 -04:00
Devin Buhl 4f04accc30 fix: update k3s Ansible role to v3.4.2 2023-06-17 06:55:05 -04:00
Devin Buhl e380868795 fix: only force delete Cilium HelmChart if it exists 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-15 15:09:51 -04:00
Devin Buhl 3116a10429 fix: k3s not cleaning up the cilium helmchart 2023-06-12 19:36:36 -04:00
Devin Buhl b539157979 fix: use wait: true on cilium helmchart removal 2023-06-11 20:34:12 -04:00
Devin Buhl 4ae51b0db8 feat: Remove Fedora server as supported OS (#774) 2023-06-05 11:15:34 -04:00
Devin Buhl 105cf542d0 fix: use temp ansible galaxy branch to ensure kube-vip is installed on all controllers 2023-05-31 21:43:02 -04:00
Devin Buhl 6db540671a fix: do not use serviceAccountName in kube-vip static pod 2023-05-31 12:03:18 -04:00
Jory IrvingandDevin Buhl dc606c984e fix: change Cilium IPAM mode to kubernetes (#762) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-05-31 11:55:34 -04:00
renovate[bot] c20183287f fix(github-release): update k3s-io/k3s to v1.27.2+k3s1 (#759) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-05-31 10:21:58 -04:00
Devin Buhl 3c0f5554a9 fix: speed up nuke playbook by preventing k3s from starting on next reboot 2023-05-30 17:19:58 -04:00
Devin Buhl 8db5c1abcd fix: add playbook to upgrade kube-vip 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-30 17:00:55 -04:00
Devin Buhl 7a54ce1a0f fix: add cilium-cli to prepare playbook and cilium uninstall to nuke playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-30 15:10:14 -04:00
Devin Buhl 0d03b598b7 fix: allow cilium HelmChart to be renovated 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-29 20:39:03 -04:00
Devin Buhl 4a339148fc chore: Clean up comments and calico references and rename kube-vip.yml to supplemental.yml 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-29 10:19:17 -04:00
renovate[bot]andDevin Buhl 68676349c3 fix(helm): update chart cilium to 1.13.3 (#757) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-05-29 09:57:55 -04:00
Devin Buhl d8aea6de29 feat: allow flux to take over cilium (#755) 2023-05-29 09:38:06 -04:00
Devin Buhl 2899466303 feat!: replace calico with cilium (#740) 2023-05-28 11:23:09 -04:00
Devin Buhl edb3b21310 fix: ansible error when trying to delete files 2023-05-27 17:34:31 -04:00
Devin Buhl 00798e85e8 feat: always delete custom- prefixed files from k3s_server_manifests_dir 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-27 08:21:29 -04:00