infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
527 Commits 41 Branches 0 Tags
26210ab6c3731b2b23fae0e1956e8bbee22cbc2e
Commit Graph
527 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
renovate[bot]andRenovate Bot 26210ab6c3 chore(deps): update dependency fluxcd/flux2 to v0.30.2 (#318) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-05-06 21:39:08 -04:00
renovate[bot]andRenovate Bot e4678272d1 chore(deps): update container image ghcr.io/k8s-at-home/kubectl to v1.24.0 (#317) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-05-06 21:38:55 -04:00
renovate[bot]andRenovate Bot 3028ebc180 chore(deps): update helm release k8s-gateway to v1.1.7 (#315) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-05-06 21:38:38 -04:00
renovate[bot]andRenovate Bot 9f4d33bc0a chore(deps): update dependency xanmanning.k3s to v3.1.2 (#314) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-05-06 21:38:24 -04:00
Devin Buhl efa91844a8 feat(cluster): increase kube-vip leader election and other args 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 18:48:54 -04:00
Devin Buhl 565b21f3d8 chore: update some var names and comments in config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 17:57:58 -04:00
Devin Buhl f1b2b6c1fc feat: more improvements to ip addressing verifications 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 15:29:32 -04:00
Devin Buhl 6f945d7427 feat: verify kube-vip IP is not in metallb range 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 14:51:43 -04:00
Devin Buhl 5ef1866151 feat: verify certain IPs are not in metallb range 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 14:44:53 -04:00
Devin Buhl b479915737 feat!: rename BOOTSTRAP_ANSIBLE_KUBE_VIP_* to BOOTSTRAP_KUBE_VIP_* 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 13:44:41 -04:00
Devin Buhl 1eab874919 chore: update the config sample comments to be more clear 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 13:00:19 -04:00
Devin Buhl 718427c9b8 feat!: rename BOOTSTRAP_ANSIBLE_KUBE_VIP_ADDRESS to BOOTSTRAP_ANSIBLE_KUBE_VIP_ADDR 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 12:57:21 -04:00
Devin Buhl e19ba910f5 fix: add validations for node IPs and load balancer IPs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 12:51:52 -04:00
Devin Buhl 77130aac02 fix: remove slash suffix on cp command 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 12:34:38 -04:00
Devin Buhl 8ff6330d47 chore: mention verification steps 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 12:14:40 -04:00
Devin Buhl 043c345373 chore: mention exception for var substitution 2022-05-06 11:37:17 -04:00
Devin Buhl cd8b55ec9a chore: change emoji symbol on nuke task 2022-05-06 11:33:08 -04:00
Devin Buhl d3806d3905 chore: add notes about the ansible:nuke task 2022-05-06 11:30:48 -04:00
Devin Buhl c4a3486c25 fix(ansible): delete ubuntu-upgrade playbook 2022-05-06 10:42:39 -04:00
Devin Buhl 9591c3feb6 fix(ansible): use full find ansible task cmd 2022-05-06 10:42:01 -04:00
Devin Buhl 65c8e27101 fix(cluster): set flux gitrepo default interval to 5m0s 2022-05-06 09:20:33 -04:00
Devin Buhl e7f9355747 fix: log a reason for possible ssh failure 2022-05-05 17:41:00 -04:00
Devin Buhl 13b8194321 feat(cluster): apply local only access middle to traefk dashboard 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-04 07:49:11 -04:00
Devin Buhl 2d22f0f8cf feat(cluster): add treafik middleware for local only access 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-04 07:46:26 -04:00
Devin Buhl 7d545ac8a5 chore: update ansible.cfg role and invetory path 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-03 19:09:51 -04:00
Devin Buhl fa1676d36c chore(make)!: task commands easier and ansible.cfg 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-03 19:01:42 -04:00
Devin Buhl 2f7a222e84 fix(cluster): enable cloudflare proxy on github webhook 2022-05-03 12:15:32 -04:00
Devin Buhl ad110e3597 fix(ansible): add rbd module back in 
This was not working on raspi devices because without the linux-modules-extra-raspi package it would fail.
 2022-05-03 04:41:06 -04:00
Devin Buhl d10800e962 fix(ansible): add logic back to install pi specific package 2022-05-03 04:36:30 -04:00
Devin Buhl 13f47df96a fix(ansible): remove modprobe rbd from kernel task 
This will fail on raspberry pis and were not installing rookceph so it's not needed.
 2022-05-03 04:09:03 -04:00
Devin Buhl cd5030e62b fix(cluster): configure script would fail on macos 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-02 18:15:07 -04:00
Devin Buhl cbd78aeabe chore(reorganize): README section a bit 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-02 17:40:36 -04:00
Nicky van MeursandDevin Buhl e863245910 Add templates and logic to set up manifests for Github webhook receiver (#308) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2022-05-02 17:31:16 -04:00
Nicky van Meurs 08a24037e2 fix(cloudflare): min TLS version 1.0 -> 1.2 (#306) 2022-05-01 10:57:55 -04:00
Devin Buhl 472a294c1e fix(ansible): add kernel role to explicity enable modules 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-01 08:46:30 -04:00
Devin Buhl 375d41d313 fix(ansible): removed linux-modules-extra-raspi due to breakage 2022-05-01 08:13:45 -04:00
Nicky van Meurs 7ce7fb27b2 chore: add guide for configuring SSH key auth (#305) 2022-05-01 07:56:50 -04:00
Devin Buhl 31272d8c81 chore(update): readme with small nits 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-04-30 17:53:41 -04:00
Devin Buhl ee82ff6bc5 chore: add note about enabling system upgrade controller 2022-04-30 11:28:20 -04:00
Devin Buhl faa3f03fbf chore: add note to readme on enabling renovatebot 2022-04-30 11:11:40 -04:00
Nicky van Meurs b61b3cb76c Small typo / grammar fix in README (#300) 2022-04-30 09:13:27 -04:00
renovate[bot]andRenovate Bot 8fa29a86b9 chore(deps): update dependency community.general to v4.8.0 (#304) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-30 09:08:35 -04:00
renovate[bot]andRenovate Bot 33d84f3633 chore(deps): update pre-commit hook zricethezav/gitleaks to v8.8.4 (#303) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-30 09:08:27 -04:00
renovate[bot]andRenovate Bot 8578c4612c chore(deps): update dependency fluxcd/flux2 to v0.29.5 (#301) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-30 09:08:19 -04:00
renovate[bot]andRenovate Bot b89e99b42d chore(deps): update dependency k3s-io/k3s to v1.23.6+k3s1 (#302) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-30 09:08:06 -04:00
Nicky van Meurs f5f23384b7 chore: add guide for configuring SSH key auth (#299) 2022-04-29 12:17:04 -04:00
Nicky van Meurs ec7283f2c2 Typo in .config.sample.env (#298) 2022-04-28 19:18:14 -04:00
Devin Buhl a0dcf7e242 chore: add note about SUC being opt-in 2022-04-28 17:41:11 -04:00
Devin Buhl f5710e3fd5 feat! make SUC opt-in 
SUC can cause issues when people are bootstrapping new clusters and there's a newer k3s version available. This can cause the cluster to fail or become unresponsive. This should be enabled with caution.

If you want to enable this, make sure you build your cluster with the latest k3s version set in the Ansible vars.
 2022-04-28 17:35:18 -04:00
Devin Buhl 3f0cd41151 feat(ansible)!: set sysctls for kubernetes 
This file is renamed from 99-kubernetes-cri.conf to 99-kubernetes.conf and also includes disabling rp_filter
https://github.com/charmed-kubernetes/layer-kubernetes-node-base/pull/2
 2022-04-28 15:35:05 -04:00