infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
870 Commits 41 Branches 0 Tags
2b0c4762d3d3e93bd41dfd3259a8013aa5a8eb9d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl 2b0c4762d3 fix: remove ricing patch that could make flux ks get overwhelmed 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-02 20:57:33 -05:00
Devin Buhl b0413fffe0 fix: use the name flux-webhook for ingress 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-01 20:03:21 -05:00
Devin Buhl 17a3fc3586 feat: include the kubernetes dashboard in the monitoring namespace 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-01 17:20:30 -05:00
Devin Buhl 73237942a0 fix: use the right annotations for external-dns and update flux/gitops dashboard ingresses 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-24 17:39:32 -05:00
Devin Buhl af17946ce5 chore: add workflow dispatch to release drafter 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-24 08:15:44 -05:00
Devin Buhl 039e1393bb chore: add community label and update link-checker label 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-24 08:13:24 -05:00
Devin Buhl 805b4bea10 chore: ghcr is default in flux manifests 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-23 21:20:48 -05:00
Devin Buhl 64c8f52006 fix: make sure to add var subst in child flux ks 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-23 21:20:26 -05:00
Devin Buhl 8213cd4ae2 chore: add lycheeignore file 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-23 13:47:58 -05:00
Devin Buhl 28e280a3de chore: tweak link check workflow and renovate config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-23 13:47:37 -05:00
Devin Buhl 457d6b0427 chore: add editorconfig to vscode extension 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-22 16:20:24 -05:00
Devin Buhl 1ba4751a24 chore: update renovate config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 16:24:44 -05:00
Devin Buhl b0538cc1a1 chore: add link checker github workflow 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 16:16:06 -05:00
Devin Buhl f7231ba28d chore: add checkout back to label sync 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 16:10:29 -05:00
Devin Buhl ac217e8a46 chore: Add meta workflows 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 16:06:42 -05:00
Devin Buhl 8ff79eeded chore: quotes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 14:42:18 -05:00
Devin Buhl 20695cd9af chore: include note about alphanumeric characters and dashes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 14:33:55 -05:00
Devin Buhl af24d3988e chore: kubernetes is now the cluster directory 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 14:28:47 -05:00
Devin Buhl 9cf356e8c4 chore: remove mention of sops pre-commit hook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 14:26:29 -05:00
Devin Buhl 8a257b07af feat: Move webhooks to add-ons directory 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-16 17:02:50 -05:00
Devin Buhl 1134b2927b feat: Remove option to disable kube-vip 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-15 18:47:40 -05:00
Devin Buhl 993757ef9d chore: Update paths in README.md 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-11-29 10:23:35 -05:00
Devin Buhl e986357982 chore: Add dot slash to most kustomizations and swap sops pre-commit hook to onedr0p 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-11-29 09:58:08 -05:00
Devin Buhl ebf643bb08 fix: Update networking namespace reference to kube-system in tmpl dir 2022-11-29 09:33:27 -05:00
Devin Buhl a02508afae fix: Try to catch incompatible sops and yq versions 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-11-29 09:28:49 -05:00
Devin Buhl 17bae3c1a2 feat!: Move networking apps into kube-system namespace 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-11-29 09:19:57 -05:00
Devin Buhl 8f77b5e2b4 feat!: Remove charts and config fluxtomizations and include them in the cluster/flux/ dir 2022-11-29 09:12:24 -05:00
Devin Buhl de61c22c37 feat!: Remove core and crds fluxtomizations and use raw helm chart to install CRs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-10-19 15:07:03 -04:00
Devin Buhl 0095369a33 feat: use new chart filenames and switch to new kured helm repo 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-09-20 13:25:20 -04:00
Devin Buhl b1ef4985c3 chore: change references from k8s-at-home to onedr0p 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-08-25 17:37:48 -04:00
Devin Buhl e7f54dd7f1 fix: use the correct sourceRef for bjw-s charts 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-08-21 12:47:10 -04:00
Devin Buhl b45279ac57 feat: swap to bjw-s app-template and remove reflector 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-08-21 12:46:31 -04:00
Devin Buhl 75a3b12bdf feat: Enable system-upgrade-controller and pin k3s version 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-07-20 18:00:20 -04:00
Devin Buhl 686f31260a feat!: Swap to Fedora Server - See 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-07-07 18:27:01 -04:00
Devin Buhl 3f124cebc3 feat(cluster)!: move cert-manager into kube-system namespace 2022-06-19 07:33:18 -04:00
Devin Buhl ae0f007b0d feat: consistency in helmreleases 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-17 13:35:04 -04:00
Devin Buhl 4c72f6105d feat: only store cluster-issuers in core kustomization 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-17 13:32:54 -04:00
Devin Buhl fb5b38e7a8 feat: move namespaces defs into apps and utilize fluxcd.io/prune label 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-16 19:44:26 -04:00
Devin Buhl fc7ddff94a fix: add ingresses task and update readme for ssh auth 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-15 08:07:31 -04:00
Devin Buhl fa9851127c fix: update renovate crd regexManager for more coverage 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-11 17:25:47 -04:00
Devin Buhl 36492334f7 fix(cluster): update flux-crds name to crds 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-10 17:31:16 -04:00
Devin Buhl 49d5e6de70 refactor(cluster)!: Update flux installation and upgrade method 
Other changes include:
- Rename cluster/base to cluster/flux
- Add config and charts fluxtomizations
- Update scripts and taskfiles to reflect changes
 2022-06-09 12:22:22 -04:00
Devin Buhl a5999667b6 feat: add sourceignore 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 10:35:01 -04:00
Devin Buhl 1c6c43f362 feat(cluster): change interval to 1 hour on helm repositories 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 10:30:08 -04:00
Devin Buhl a89a85980a feat(cluster)!: remove dash charts prefix on flux helmrepositories 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 10:05:36 -04:00
Devin Buhl 89d03e1e30 feat(cluster): replace ealenn/echo-server with jmalloc/echo-server 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 10:02:51 -04:00
Devin Buhl 95eb2c5639 feat(cluster)!: move charts into their own fluxtomization 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 09:55:26 -04:00
Devin Buhl 83a3881535 chore: remove gitleaks reference from readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 09:44:32 -04:00
Devin Buhl d62a161fe6 feat(pre-commit): remove flakey gitleaks hook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 09:41:19 -04:00
Devin Buhl a3d095e06f chore: add kured to list of additional apps 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 09:35:00 -04:00
Devin Buhl a01e72fe5f feat: rename repo to flux-cluster-template 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 09:32:48 -04:00
Devin Buhl b4bf729f82 fix(cluster): do not kah traefik mirror image 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 09:25:07 -04:00
Devin Buhl 863a330a28 feat(cluster): use metallb annotation for loadBalancerIP 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 09:23:49 -04:00
Devin Buhl 3a5b188e9a feat(cluster): add kured as optional deployment 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-09 09:13:42 -04:00
Devin Buhl 46f1a392fb feat(ansible): rename playbooks and update AnsibleTasks 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-08 09:42:09 -04:00
Devin Buhl db0e397172 fix(ansible): smoll tweaks for k3s install playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-23 20:10:06 -04:00
Devin Buhl c56f1bc481 feat(cluster): use LE staging env for initial setup 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-17 18:20:34 -04:00
Devin Buhl 2e05f464aa feat(repository): add vscode folder with good defaults and extension recommendations 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-16 18:27:29 -04:00
Devin Buhl 0f8136432d feat(ansible): add handler to restart node if needed 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-16 17:07:16 -04:00
Devin Buhl 8beba77f76 chore(README): add benefits of public repo 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-16 14:50:39 -04:00
Devin Buhl 558644407d chore(README): add optionally to private repo line 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-16 14:47:18 -04:00
Devin Buhl 99b43654c0 chore(README): add instructions on Flux SSH authentication 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-16 14:46:05 -04:00
Devin Buhl d02f6720e3 feat(ansible): add checks for verify kube-vip nic exists 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-13 15:38:04 -04:00
Devin Buhl 7016d01ed4 feat(taskfile): add cluster and flux cmds to taskfiles 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-10 09:24:06 -04:00
Devin Buhl 85cb480fe7 chore: add note in readme about cloudflare registrar 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-10 08:06:37 -04:00
Devin Buhl 6b0dc651f5 fix(ansible): wait 15 seconds before deleting the k3s deployed manifests 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-10 07:44:55 -04:00
Devin Buhl ed9bdd20c1 feat(cluster): update existing traefik middlewares and add cloudflare-only middleware 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-10 07:33:09 -04:00
Devin Buhl e1c1d1689b chore: Add homebrew task to taskfile and update README.md 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-09 16:54:31 -04:00
Devin Buhl 4ab22b451c fix: set replicaCount to 2 for echo-server 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-08 20:39:36 -04:00
Devin Buhl 1e6cc45558 fix: consistency in task commands 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-08 20:38:22 -04:00
Devin Buhl 1489e7217d feat!: minor taskfile changes and readme updates 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-08 20:28:13 -04:00
Devin Buhl 16b75ac1c5 fix(renovate): revert regex manager to capture traefik crd updates 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-07 08:48:03 -04:00
Devin Buhl efa91844a8 feat(cluster): increase kube-vip leader election and other args 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 18:48:54 -04:00
Devin Buhl 565b21f3d8 chore: update some var names and comments in config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 17:57:58 -04:00
Devin Buhl f1b2b6c1fc feat: more improvements to ip addressing verifications 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 15:29:32 -04:00
Devin Buhl 6f945d7427 feat: verify kube-vip IP is not in metallb range 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 14:51:43 -04:00
Devin Buhl 5ef1866151 feat: verify certain IPs are not in metallb range 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 14:44:53 -04:00
Devin Buhl b479915737 feat!: rename BOOTSTRAP_ANSIBLE_KUBE_VIP_* to BOOTSTRAP_KUBE_VIP_* 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 13:44:41 -04:00
Devin Buhl 1eab874919 chore: update the config sample comments to be more clear 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 13:00:19 -04:00
Devin Buhl 718427c9b8 feat!: rename BOOTSTRAP_ANSIBLE_KUBE_VIP_ADDRESS to BOOTSTRAP_ANSIBLE_KUBE_VIP_ADDR 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 12:57:21 -04:00
Devin Buhl e19ba910f5 fix: add validations for node IPs and load balancer IPs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 12:51:52 -04:00
Devin Buhl 77130aac02 fix: remove slash suffix on cp command 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 12:34:38 -04:00
Devin Buhl 8ff6330d47 chore: mention verification steps 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-06 12:14:40 -04:00
Devin Buhl 13b8194321 feat(cluster): apply local only access middle to traefk dashboard 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-04 07:49:11 -04:00
Devin Buhl 2d22f0f8cf feat(cluster): add treafik middleware for local only access 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-04 07:46:26 -04:00
Devin Buhl 7d545ac8a5 chore: update ansible.cfg role and invetory path 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-03 19:09:51 -04:00
Devin Buhl fa1676d36c chore(make)!: task commands easier and ansible.cfg 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-03 19:01:42 -04:00
Devin Buhl cd5030e62b fix(cluster): configure script would fail on macos 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-02 18:15:07 -04:00
Devin Buhl cbd78aeabe chore(reorganize): README section a bit 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-02 17:40:36 -04:00
Devin Buhl 472a294c1e fix(ansible): add kernel role to explicity enable modules 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-05-01 08:46:30 -04:00
Devin Buhl 31272d8c81 chore(update): readme with small nits 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-04-30 17:53:41 -04:00
Devin Buhl f04642de5d chore(update): readme and set k3s_use_unsupported_config to true by default 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-04-17 09:40:09 -04:00
Devin Buhl 09a6bfcb79 feat(cluster): move system-upgrade-controller to crds and apps 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-04-15 21:56:30 -04:00
Devin Buhl fb46904c9d feat(cluster): add remediations in helm releases 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-02-18 08:36:11 -05:00
Devin Buhl a7bea496af fix(cluster): encrypt cloudflare-ddns secret with sops 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-02-16 11:16:35 -05:00
Devin Buhl fe33dc2174 feat(cluster): implement cloudflare-ddns cronjob in networking namespace 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-02-16 11:14:55 -05:00
Devin Buhl aff703a6b4 feat(cluster): implement echo-server helm release 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-02-15 11:56:36 -05:00
Devin Buhl 514be6a541 fix(cluster): sync up kubevip ansible and cluster manifests 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-02-13 14:56:11 -05:00
Devin Buhl 9a6926504b chore(docs): update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-02-08 11:01:18 -05:00
Devin Buhl 50b44352df feat(cluster): use flux renovate manager to update flux 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-02-07 17:44:32 -05:00