infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
840 Commits 41 Branches 0 Tags
26cc95a9aa85c3a6ad83eadca21dc1201ac4af5a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl 26cc95a9aa chore: run labeler on PRs 2022-12-22 11:22:03 -05:00
Devin Buhl 229a533718 chore: add weave-gitops to require cli tools 2022-12-21 14:23:52 -05:00
Devin Buhl 4e6edcc66a feat!: Refector directories and flux apps (#559) 2022-12-21 14:22:18 -05:00
Devin Buhl 4c0199813d chore: add editorconfig 2022-12-17 15:59:13 -05:00
Devin Buhl a1d6840205 feat: use quay registry for calico 2022-12-16 21:29:25 -05:00
Devin Buhl 8df54c5dca fix: ffs 2022-12-16 19:19:12 -05:00
Devin Buhl 183d6c48d6 chore: remove wiki reference 2022-12-16 17:55:10 -05:00
Devin Buhl 9932f2705c fix: indentation 2022-12-15 17:36:33 -05:00
Devin Buhl f10ca0bcba Remove swap and ufw options (#554) 
* remove options from playbook

* remove options from vars

* prom file names
 2022-12-14 04:19:45 -05:00
Devin Buhl 88decb875f feat: add resource readiness check to cluster-installation playbook (#547) 2022-12-09 11:58:51 -05:00
Devin Buhl 68dae9b222 fix: reduce calico version 
https://github.com/projectcalico/calico/issues/7003
 2022-11-25 21:42:38 -05:00
Devin Buhl 64acf02d09 fix: pin calico to specific manifest 2022-11-25 21:36:19 -05:00
Devin Buhl fc26547bf1 fix: remove extra steps in cluster-prepare playbook that are not needed 2022-11-22 11:54:44 -05:00
Devin Buhl 20ca38c35d fix: remove some extra fedora packages that are not required 2022-11-22 11:53:43 -05:00
Devin Buhl 47a28ae016 fix: deprecation warnings on ipaddr 2022-11-04 09:46:17 -04:00
Devin Buhl effd4dd950 fix: add calico configuration to hopefully select the right NIC on basic setups 2022-11-04 09:38:02 -04:00
Devin Buhl 6d22dfdb33 fix: add hr-restart task 2022-10-22 09:17:32 -04:00
Devin Buhl 482a5a3afe fix: use networking ns for cert manager secret 2022-10-22 08:44:51 -04:00
Devin Buhl 4cf34653cb fix: control nodes not given the right filename when using prefix 2022-10-21 14:39:51 -04:00
Devin Buhl 9b3e9341ca fix: use networking namespace for metallb CRs 2022-10-09 09:08:45 -04:00
Devin Buhl e95b9044ad chore: disable renovate kubernetes-api datasource 2022-10-07 13:09:03 -04:00
Devin Buhl d5769a972a fix: do not pin hajimari verison in helmrelease 2022-10-07 13:06:57 -04:00
Devin Buhl 3d4e728d65 fix: metallb psp indentation 2022-09-27 18:58:40 -04:00
Devin Buhl 00ae67d729 fix: do not create metallb psp 2022-09-27 18:58:10 -04:00
Devin Buhl fad9dd54ee feat: bump calico to v3.24 2022-09-20 13:27:50 -04:00
Devin Buhl ce44dd1c5d chore: fix up readme again 2022-09-05 08:53:47 -04:00
Devin Buhl 2e2746daea chore: make README clear about most recent CLI tools 2022-09-05 08:52:52 -04:00
Devin Buhl 229c3000c9 chore: update comment about pruning manifests 2022-08-19 18:09:02 -04:00
Devin Buhl 0a3bc812c9 fix: kube vip rbac use dot not dash 2022-08-18 11:11:08 -04:00
Devin Buhl a62a2752fd fix: kube-vip changes for k8s 1.24 2022-08-18 11:08:52 -04:00
Devin Buhl cdea056ca2 fix: add tflint to configure verify 2022-07-25 21:47:41 -04:00
Devin Buhl d41a82c572 fix: add tflint to brew install 2022-07-25 21:45:56 -04:00
Devin Buhl 8763fadb74 fix: add rebootSentinelCommand to kured for fedora (split on new line) 2022-07-25 16:25:00 -04:00
Devin Buhl 51c33bc113 fix: add rebootSentinelCommand to kured for fedora 2022-07-25 16:24:19 -04:00
Devin Buhl 2d8fcb6e10 fix: use ghcr for flux images 2022-07-20 08:03:09 -04:00
Devin Buhl 0c6c66ce85 chore(readme): add reading material section 2022-07-17 08:41:16 -04:00
Devin Buhl f80ab355b0 fix: patch out the flux netpols 2022-07-16 18:55:18 -04:00
Devin Buhl 2313461f93 fix: update resources in receiver 2022-07-12 09:09:16 -04:00
Devin Buhl 650b8a8810 fix(ansible): set remote_tmp to /tmp 2022-07-12 09:07:31 -04:00
Devin Buhl 3c8568bc3c chore: update readme 2022-07-09 06:57:35 -04:00
Devin Buhl 6a758ee101 feat!: replace traefik with nginx ingress (#388) 
* feat: remove traefik crds

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in config sample env

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in configure

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in cluster-settings

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in configure

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change README.md to ingress-nginx

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove traefik helm release

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove traefik helm repo

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove error-pages

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove other traefik references

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add ingress-nginx helm repo

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add ingress-nginx helm release

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-07-07 09:51:41 -04:00
Devin Buhl 8091656c05 fix: actually deploy metallb 2022-06-19 12:55:34 -04:00
Devin Buhl ad529970c8 fix: there is no metallb system ns 2022-06-19 12:50:48 -04:00
Devin Buhl 2a3d7d6fa5 fix: secret is in core for cert manager 2022-06-19 12:48:17 -04:00
Devin Buhl 4969c53367 fix: remove namespace.yaml from cert-manager kustomization 2022-06-19 09:56:12 -04:00
Devin Buhl 7f375f1ad7 chore: add cert-manager renovate group 2022-06-19 08:27:52 -04:00
Devin Buhl 9fd26ad08d fix: traefik crds 2022-06-19 06:07:52 -04:00
Devin Buhl 84cbe4e596 fix: cluster issuers path 2022-06-18 16:24:17 -04:00
Devin Buhl 99aea49bdf fix: set external-dns interval back to 5m 2022-06-17 14:41:25 -04:00
Devin Buhl 0eb89d9eee fix(echo-server): use the correct tls options 2022-06-13 10:53:21 -04:00
Devin Buhl 8704ca93e1 fix(cluster): echo-server indentation 2022-06-11 21:06:31 -04:00
Devin Buhl 1db1872de1 fix: remove extra quotes around metallb traefik annotation 2022-06-11 17:04:11 -04:00
Devin Buhl 283ec2f52c fix: stakater-charts helm URL 2022-06-10 18:08:08 -04:00
Devin Buhl 57c32173e9 fix(configure): update sops encrypt to point to cluster/config 2022-06-10 12:46:25 -04:00
Devin Buhl e7d8409bd7 feat: use key_groups in sops configuration file 2022-06-08 09:01:01 -04:00
Devin Buhl 63e29a7257 feat(kube-vip)!: Use auto detection of kube-vip interface (#331) 
* Remove kube-vip interface config setting

* Remove kube-vip interface Ansible variable

* Remove kube-vip interface from cluster manifest

* Remove kube-vip interface from Ansible deployment

* Delete checks for consistent kube-vip interface names

* Remove checks task from Ansible role
 2022-05-22 23:15:51 -04:00
Devin Buhl 1fa16287e8 chore(README): Clean up provisioning tools section 2022-05-22 11:01:22 -04:00
Devin Buhl 3c276effd1 chore(README): mention arm64/amd64 nodes are supported 2022-05-22 10:56:12 -04:00
Devin Buhl 1363b755f4 fix: use github-deploy-key in gitignore 2022-05-16 18:20:11 -04:00
Devin Buhl 63d077e1dd feat(cluster): add error-pages (#207) 2022-05-13 14:03:25 -04:00
Devin Buhl 141f6ad107 fix: add cloudflare-only middleware to webhook ingress 2022-05-10 22:01:29 -04:00
Devin Buhl 08b05b0e31 chore: add another verification step 2022-05-07 05:02:16 -04:00
Devin Buhl 043c345373 chore: mention exception for var substitution 2022-05-06 11:37:17 -04:00
Devin Buhl cd8b55ec9a chore: change emoji symbol on nuke task 2022-05-06 11:33:08 -04:00
Devin Buhl d3806d3905 chore: add notes about the ansible:nuke task 2022-05-06 11:30:48 -04:00
Devin Buhl c4a3486c25 fix(ansible): delete ubuntu-upgrade playbook 2022-05-06 10:42:39 -04:00
Devin Buhl 9591c3feb6 fix(ansible): use full find ansible task cmd 2022-05-06 10:42:01 -04:00
Devin Buhl 65c8e27101 fix(cluster): set flux gitrepo default interval to 5m0s 2022-05-06 09:20:33 -04:00
Devin Buhl e7f9355747 fix: log a reason for possible ssh failure 2022-05-05 17:41:00 -04:00
Devin Buhl 2f7a222e84 fix(cluster): enable cloudflare proxy on github webhook 2022-05-03 12:15:32 -04:00
Devin Buhl ad110e3597 fix(ansible): add rbd module back in 
This was not working on raspi devices because without the linux-modules-extra-raspi package it would fail.
 2022-05-03 04:41:06 -04:00
Devin Buhl d10800e962 fix(ansible): add logic back to install pi specific package 2022-05-03 04:36:30 -04:00
Devin Buhl 13f47df96a fix(ansible): remove modprobe rbd from kernel task 
This will fail on raspberry pis and were not installing rookceph so it's not needed.
 2022-05-03 04:09:03 -04:00
Devin Buhl 375d41d313 fix(ansible): removed linux-modules-extra-raspi due to breakage 2022-05-01 08:13:45 -04:00
Devin Buhl ee82ff6bc5 chore: add note about enabling system upgrade controller 2022-04-30 11:28:20 -04:00
Devin Buhl faa3f03fbf chore: add note to readme on enabling renovatebot 2022-04-30 11:11:40 -04:00
Devin Buhl a0dcf7e242 chore: add note about SUC being opt-in 2022-04-28 17:41:11 -04:00
Devin Buhl f5710e3fd5 feat! make SUC opt-in 
SUC can cause issues when people are bootstrapping new clusters and there's a newer k3s version available. This can cause the cluster to fail or become unresponsive. This should be enabled with caution.

If you want to enable this, make sure you build your cluster with the latest k3s version set in the Ansible vars.
 2022-04-28 17:35:18 -04:00
Devin Buhl 3f0cd41151 feat(ansible)!: set sysctls for kubernetes 
This file is renamed from 99-kubernetes-cri.conf to 99-kubernetes.conf and also includes disabling rp_filter
https://github.com/charmed-kubernetes/layer-kubernetes-node-base/pull/2
 2022-04-28 15:35:05 -04:00
Devin Buhl b92dda91f5 chore: update docs to mention cloud providers and multi masters 2022-04-28 08:41:52 -04:00
Devin Buhl be8ef2dc77 chore: ubuntu 22.04 🎉 2022-04-27 12:33:55 -04:00
Devin Buhl 6c844dacdd fix: upgrade calico to 3.22 2022-04-16 13:21:29 -04:00
Devin Buhl 3841e8d962 fix: update feature flags on k3s worker nodes 2022-04-16 08:51:02 -04:00
Devin Buhl 1113058e7e fix: update feature flags on k3s masters 2022-04-16 08:50:34 -04:00
Devin Buhl 840450363f chore: more readme changes on DNS 2022-04-16 00:41:05 -04:00
Devin Buhl 82d769dffb chore: update readme on external-dns 2022-04-16 00:35:25 -04:00
Devin Buhl 6cbfd7cb9c feat: add external-dns for managing public DNS records (#288) 2022-04-16 00:04:38 -04:00
Devin Buhl c62dcbe8da feat: add k8s_gateway for accessing ingresses locally over DNS (#287) 2022-04-15 23:21:26 -04:00
Devin Buhl c582c24d98 fix(renovate): update regexmanagers 2022-04-11 17:49:40 -04:00
Devin Buhl e88a2260c5 fix: schedule on weekends 2022-03-25 15:31:39 -04:00
Devin Buhl 517380d4c8 fix: indentation issue in kube vip ds 2022-03-12 16:04:18 -05:00
Devin Buhl 26b42a32d1 fix: indentation in kube vip ds 2022-03-12 16:02:34 -05:00
Devin Buhl 64cd7f8457 chore: hajimari check after flux 2022-03-04 22:46:40 -05:00
Devin Buhl 996df6c0b5 fix: delete unused config pvc from echo server kustomization 2022-02-26 06:26:01 -05:00
Devin Buhl 6ffae7a77b fix(cluster): update server plan to 1.23 channel 2022-02-13 08:43:24 -05:00
Devin Buhl eef6151373 fix(cluster): update agent plan to 1.23 channel 2022-02-13 08:43:09 -05:00
Devin Buhl 1b07a09520 fix(ansible): bump k3s to v1.23.3+k3s1 2022-02-13 08:42:27 -05:00
Devin Buhl 3c75be1efb chore(docs): mention reflector in README 2022-02-11 17:00:00 -05:00
Devin Buhl 84c2c805dc fix(renovate): add flux controllers to ignoreDeps 2022-02-07 17:40:28 -05:00
Devin Buhl 85a26f67fc chore: add single control plane note in readme 2022-02-03 11:32:22 -05:00