Commit Graph
846 Commits
Author SHA1 Message Date
Devin Buhl 99b43654c0 chore(README): add instructions on Flux SSH authentication
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-16 14:46:05 -04:00
renovate[bot]andRenovate Bot 5eeff9cc57 chore(deps): update terraform sops to v0.7.1 (#325)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-05-14 14:34:10 -04:00
renovate[bot]andRenovate Bot a2cbfd84e9 chore(deps): update pre-commit hook lucas-c/pre-commit-hooks to v1.1.14 (#322)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-05-14 00:06:42 -04:00
Devin Buhl d02f6720e3 feat(ansible): add checks for verify kube-vip nic exists
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-13 15:38:04 -04:00
Devin Buhl 63d077e1dd feat(cluster): add error-pages (#207) 2022-05-13 14:03:25 -04:00
Devin Buhl 141f6ad107 fix: add cloudflare-only middleware to webhook ingress 2022-05-10 22:01:29 -04:00
Devin Buhl 7016d01ed4 feat(taskfile): add cluster and flux cmds to taskfiles
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-10 09:24:06 -04:00
Devin Buhl 85cb480fe7 chore: add note in readme about cloudflare registrar
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-10 08:06:37 -04:00
Devin Buhl 6b0dc651f5 fix(ansible): wait 15 seconds before deleting the k3s deployed manifests
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-10 07:44:55 -04:00
Devin Buhl ed9bdd20c1 feat(cluster): update existing traefik middlewares and add cloudflare-only middleware
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-10 07:33:09 -04:00
Devin Buhl e1c1d1689b chore: Add homebrew task to taskfile and update README.md
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-09 16:54:31 -04:00
Devin Buhl 4ab22b451c fix: set replicaCount to 2 for echo-server
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-08 20:39:36 -04:00
Devin Buhl 1e6cc45558 fix: consistency in task commands
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-08 20:38:22 -04:00
Devin Buhl 1489e7217d feat!: minor taskfile changes and readme updates
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-08 20:28:13 -04:00
renovate[bot]andRenovate Bot 4c04992df1 chore(deps): update helm release traefik to v10.19.5 (#316)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-05-07 08:49:27 -04:00
Devin Buhl 16b75ac1c5 fix(renovate): revert regex manager to capture traefik crd updates
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-07 08:48:03 -04:00
5deca048cf chore(deps): update helm release echo-server to v0.4.0 (#319)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2022-05-07 08:29:09 -04:00
Devin Buhl 08b05b0e31 chore: add another verification step 2022-05-07 05:02:16 -04:00
renovate[bot]andRenovate Bot 2b8753631c chore(deps): update terraform cloudflare to v3.14.0 (#320)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-05-06 21:40:34 -04:00
renovate[bot]andRenovate Bot 26210ab6c3 chore(deps): update dependency fluxcd/flux2 to v0.30.2 (#318)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-05-06 21:39:08 -04:00
renovate[bot]andRenovate Bot e4678272d1 chore(deps): update container image ghcr.io/k8s-at-home/kubectl to v1.24.0 (#317)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-05-06 21:38:55 -04:00
renovate[bot]andRenovate Bot 3028ebc180 chore(deps): update helm release k8s-gateway to v1.1.7 (#315)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-05-06 21:38:38 -04:00
renovate[bot]andRenovate Bot 9f4d33bc0a chore(deps): update dependency xanmanning.k3s to v3.1.2 (#314)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-05-06 21:38:24 -04:00
Devin Buhl efa91844a8 feat(cluster): increase kube-vip leader election and other args
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 18:48:54 -04:00
Devin Buhl 565b21f3d8 chore: update some var names and comments in config
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 17:57:58 -04:00
Devin Buhl f1b2b6c1fc feat: more improvements to ip addressing verifications
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 15:29:32 -04:00
Devin Buhl 6f945d7427 feat: verify kube-vip IP is not in metallb range
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 14:51:43 -04:00
Devin Buhl 5ef1866151 feat: verify certain IPs are not in metallb range
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 14:44:53 -04:00
Devin Buhl b479915737 feat!: rename BOOTSTRAP_ANSIBLE_KUBE_VIP_* to BOOTSTRAP_KUBE_VIP_*
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 13:44:41 -04:00
Devin Buhl 1eab874919 chore: update the config sample comments to be more clear
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 13:00:19 -04:00
Devin Buhl 718427c9b8 feat!: rename BOOTSTRAP_ANSIBLE_KUBE_VIP_ADDRESS to BOOTSTRAP_ANSIBLE_KUBE_VIP_ADDR
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 12:57:21 -04:00
Devin Buhl e19ba910f5 fix: add validations for node IPs and load balancer IPs
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 12:51:52 -04:00
Devin Buhl 77130aac02 fix: remove slash suffix on cp command
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 12:34:38 -04:00
Devin Buhl 8ff6330d47 chore: mention verification steps
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-06 12:14:40 -04:00
Devin Buhl 043c345373 chore: mention exception for var substitution 2022-05-06 11:37:17 -04:00
Devin Buhl cd8b55ec9a chore: change emoji symbol on nuke task 2022-05-06 11:33:08 -04:00
Devin Buhl d3806d3905 chore: add notes about the ansible:nuke task 2022-05-06 11:30:48 -04:00
Devin Buhl c4a3486c25 fix(ansible): delete ubuntu-upgrade playbook 2022-05-06 10:42:39 -04:00
Devin Buhl 9591c3feb6 fix(ansible): use full find ansible task cmd 2022-05-06 10:42:01 -04:00
Devin Buhl 65c8e27101 fix(cluster): set flux gitrepo default interval to 5m0s 2022-05-06 09:20:33 -04:00
Devin Buhl e7f9355747 fix: log a reason for possible ssh failure 2022-05-05 17:41:00 -04:00
Devin Buhl 13b8194321 feat(cluster): apply local only access middle to traefk dashboard
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-04 07:49:11 -04:00
Devin Buhl 2d22f0f8cf feat(cluster): add treafik middleware for local only access
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-04 07:46:26 -04:00
Devin Buhl 7d545ac8a5 chore: update ansible.cfg role and invetory path
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-03 19:09:51 -04:00
Devin Buhl fa1676d36c chore(make)!: task commands easier and ansible.cfg
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-03 19:01:42 -04:00
Devin Buhl 2f7a222e84 fix(cluster): enable cloudflare proxy on github webhook 2022-05-03 12:15:32 -04:00
Devin Buhl ad110e3597 fix(ansible): add rbd module back in
This was not working on raspi devices because without the linux-modules-extra-raspi package it would fail.
2022-05-03 04:41:06 -04:00
Devin Buhl d10800e962 fix(ansible): add logic back to install pi specific package 2022-05-03 04:36:30 -04:00
Devin Buhl 13f47df96a fix(ansible): remove modprobe rbd from kernel task
This will fail on raspberry pis and were not installing rookceph so it's not needed.
2022-05-03 04:09:03 -04:00
Devin Buhl cd5030e62b fix(cluster): configure script would fail on macos
Signed-off-by: Devin Buhl <devin@buhl.casa>
2022-05-02 18:15:07 -04:00