JJGadgets
8a6f98ae6c
fix(cilium): disable BPF masquerade ( #1334 )
...
* fix(cilium): disable BPF masquerade
It could cause issues/complications with more advanced networking configuration on the host (e.g. using FRR OpenFabric for host-level routing between nodes, or using other eBPF apps with Cilium).
There's also no real advantage to using in homelab, so it should be safer to disable this.
* fix(cilium): disable BPF masquerade
It could cause issues/complications with more advanced networking configuration on the host (e.g. using FRR OpenFabric for host-level routing between nodes, or using other eBPF apps with Cilium).
There's also no real advantage to using in homelab, so it should be safer to disable this.
2024-02-17 17:54:37 -05:00
Devin Buhl
c17d543b21
refactor!: project updates ( #1326 )
...
* refactor!: flux is required again
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: delimiter that chomps
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: bootstrap_cloudflare logic
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update tests
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: remove last quote
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-02-15 20:03:24 -05:00
Petr Řehoř
98c1ca40e7
Add note about device selection in Cilium Helm Release ( #1297 )
...
See onedr0p/cluster-template#1295
2024-02-08 15:52:24 -05:00
Wasurerarenai and Devin Buhl
2549e3698f
feat(talos): Add cilium bgpControlPlane support and CNI security settings ( #1296 )
...
* fix: Use cilium cni install values for Talos
* fix: Use cilium cni install values for Talos
* feat: Add cilium bgpControlPlane support for Talos
* feat: Add cilium bgpControlPlane support for Talos
* feat: Add LB cidr var for Talos BGPCP
* feat: Add jinja template for cilium-bgp.yaml
* Add cilium bgpControlPlane support for Talos
* feat: Add cilium bgpControlPlane example config for Talos
* fix: Remove invalid fields from bgp peering policy
* fix: Add serviceSelector to bgp peering policy
* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2
* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2
* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2
* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2
---------
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
2024-02-08 08:27:40 -05:00
Devin Buhl
eab63476b7
feat(k0s): unsupport it ( #1291 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-02-02 18:02:14 -05:00
Devin Buhl
89673cd17b
feat: distribution is a dict and nodes and cluster are top level ( #1288 )
...
* feat: distribution is a dict and nodes and cluster are top level
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: housekeeping
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-02-01 20:31:42 -05:00
Devin Buhl
c59d03c69e
feat: enabled monitors everywhere and standardize resources a bit ( #1281 )
...
* feat: enabled monitors everywhere and standardize resources a bit
Signed-off-by: Devin Buhl <devin@buhl.casa >
* add raw tags
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-31 18:01:47 -05:00
renovate[bot] and Devin Buhl
b24a55e790
feat(helm): update chart cilium to 1.15.0 ( #1280 )
...
* feat(helm): update chart cilium to 1.15.0
* Update cilium-values-full.partial.yaml.j2
* Update cilium-values-init.partial.yaml.j2
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
2024-01-31 16:43:40 -05:00
Devin Buhl
df642e5425
feat: update jinja delimiters back to default ( #1269 )
...
* feat: update jinja delimiters back to default
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: remove cert-manager promrules
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update talos csr approver
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-29 17:11:37 -05:00
Devin Buhl
889ca07692
feat: refactor config file ( #1267 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-28 12:41:31 -05:00
Devin Buhl
4ac206aef5
fix: remove local hostpath and cilium lb vars and update k0s ( #1261 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-26 17:28:36 -05:00
Devin Buhl
e321b148a6
feat: removal of all addons ( #1247 )
...
* feat: removal of all addons
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update the mj script
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: remove the default namespace
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: remove descheduler and move reloader into flux-system
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-25 11:09:00 -05:00
Devin Buhl
afbf097dac
feat: update kube-vip ansible playbook for k0s and k3s - ipv6 config changes ( #1234 )
...
* feat: update kube-vip ansible playbook for k0s and k3s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update renovate
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: move ipv6 to advanced options
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: kube-vip manifests to partials
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: kube vip samesies
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update config sample
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-22 15:28:21 -05:00
Devin Buhl
e1330d734c
feat: more changes to templating ( #1218 )
...
* feat: clean up more jinja default references
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: add additional tls sans force kube-vip on k3s
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-21 11:39:12 -05:00
Devin Buhl
8339d142b7
feat: move various config options to advanced flags ( #1217 )
...
* feat: move various config options to advanced flags
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: remove lp refs
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-21 09:53:25 -05:00
Devin Buhl
1ec59d1559
feat: add advanced features to config ( #1208 )
...
* feat: add advanced features to config
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: only enable longhorn if distro is k3s or k0s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update ansible lint
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-20 12:27:20 -05:00
Devin Buhl
965bfcdcb9
feat: k0s remove isolated controllers support and ansible prepare playbook ( #1205 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-19 17:35:33 -05:00
Devin Buhl
91d8b84f3c
feat: add talos support ( #1192 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-19 05:36:25 -05:00
Devin Buhl
0c4f0260d5
fix: ansible dir should only exist for k3s and k0s ( #1191 )
...
* fix: ansible dir should only exist for k3s and k0s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: rename partial files
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-18 13:52:11 -05:00