renovate[bot]
34cd3d2f99
fix(helm): update chart cilium to 1.15.3 ( #1391 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-27 19:31:20 -04:00
Jean-François Roy and Devin Buhl
1a9c37c910
fix(metrics-server): Remove --kubelet-insecure-tls ( #1389 )
...
* fix(metrics-server): Remove --kubelet-insecure-tls
According to https://www.talos.dev/v1.6/kubernetes-guides/configuration/deploy-metrics-server , this flag is not necessary when enabling certificate rotation and an auto CSR approver.
* Update helmrelease.yaml.j2
---------
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
2024-03-27 12:56:43 -04:00
renovate[bot]
986cf0d0eb
fix(helm): update chart reloader to 1.0.71 ( #1382 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-20 08:19:07 -04:00
Devin Buhl
b275b781fd
feat(talos): change from net.ifnames to a macaddr deviceSelector ( #1376 )
...
* feat(talos): change from net.ifnames to a macaddr deviceSelector
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: derpge
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: logic is easier to follow now questionmark
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: logic is easier to follow now questionmark
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-03-18 19:06:19 -04:00
renovate[bot]
1656c05156
fix(helm): update chart cilium to 1.15.2 ( #1369 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-14 10:44:22 -04:00
Devin Buhl
dff0eb75ac
fix: keepHistory is false by default
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-03-06 08:26:49 -05:00
Stephen Bonnell and Devin Buhl
d105410b6b
feat!(kube-vip): Enable flux taking over kube-vip post-deployment. ( #1357 )
...
* feat!(kube-vip): Enable flux taking over kube-vip post-deployment.
* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/app/kustomization.yaml.j2
* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/app/kustomization.yaml.j2
* Update daemonset.yaml.j2
* Update rbac.yaml.j2
* Update bootstrap/templates/kubernetes/apps/kube-system/kustomization.yaml.j2
* Update kustomization.yaml.j2
* Update kustomization.yaml.j2
* Create .mjfilter.py
* Update bootstrap/templates/ansible/playbooks/cluster-installation.yaml.j2
* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/ks.yaml.j2
---------
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
2024-03-06 08:19:51 -05:00
renovate[bot]
08676e183c
fix(helm): update chart reloader to 1.0.69 ( #1345 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-23 07:37:03 -05:00
renovate[bot]
e38e371719
fix(container): update image spegel to v0.0.18 ( #1328 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-15 20:29:33 -05:00
renovate[bot]
df33bd4836
fix(helm): update chart kubelet-csr-approver to 1.0.7 ( #1329 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-15 20:29:26 -05:00
renovate[bot]
8162ff8916
feat(helm): update chart cilium to 1.15.1 ( #1330 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-15 20:29:17 -05:00
Devin Buhl
c17d543b21
refactor!: project updates ( #1326 )
...
* refactor!: flux is required again
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: delimiter that chomps
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: bootstrap_cloudflare logic
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update tests
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: remove last quote
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-02-15 20:03:24 -05:00
Wouter Bouvy and Devin Buhl
89559608b2
feat(talos): Add option to specify other gateway ( #1316 )
...
* feat(talos): Add option to specify other gateway
* Renamed to default_gateway and add BGP config
* Update config.sample.yaml
---------
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
2024-02-13 15:04:56 -05:00
Wasurerarenai
381d3f1a5b
fix(cilium): Correct L2 kustomization exclusion logic ( #1314 )
2024-02-13 01:34:03 -05:00
renovate[bot]
91fdd72d27
fix(helm): update chart reloader to 1.0.67 ( #1303 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-09 20:47:09 -05:00
renovate[bot]
b7631dac09
feat(helm): update chart metrics-server to 3.12.0 ( #1306 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-09 20:46:37 -05:00
Wasurerarenai and Devin Buhl
2549e3698f
feat(talos): Add cilium bgpControlPlane support and CNI security settings ( #1296 )
...
* fix: Use cilium cni install values for Talos
* fix: Use cilium cni install values for Talos
* feat: Add cilium bgpControlPlane support for Talos
* feat: Add cilium bgpControlPlane support for Talos
* feat: Add LB cidr var for Talos BGPCP
* feat: Add jinja template for cilium-bgp.yaml
* Add cilium bgpControlPlane support for Talos
* feat: Add cilium bgpControlPlane example config for Talos
* fix: Remove invalid fields from bgp peering policy
* fix: Add serviceSelector to bgp peering policy
* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2
* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2
* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2
* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2
---------
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
2024-02-08 08:27:40 -05:00
Devin Buhl
eab63476b7
feat(k0s): unsupport it ( #1291 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-02-02 18:02:14 -05:00
Devin Buhl
89673cd17b
feat: distribution is a dict and nodes and cluster are top level ( #1288 )
...
* feat: distribution is a dict and nodes and cluster are top level
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: housekeeping
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-02-01 20:31:42 -05:00
Devin Buhl
c59d03c69e
feat: enabled monitors everywhere and standardize resources a bit ( #1281 )
...
* feat: enabled monitors everywhere and standardize resources a bit
Signed-off-by: Devin Buhl <devin@buhl.casa >
* add raw tags
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-31 18:01:47 -05:00
renovate[bot]
817a5ea1c2
fix(helm): update chart reloader to 1.0.65 ( #1279 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-31 15:19:17 -05:00
Devin Buhl
df642e5425
feat: update jinja delimiters back to default ( #1269 )
...
* feat: update jinja delimiters back to default
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: remove cert-manager promrules
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update talos csr approver
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-29 17:11:37 -05:00
Devin Buhl
889ca07692
feat: refactor config file ( #1267 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-28 12:41:31 -05:00
Devin Buhl
3b0fcb7ba5
feat: update network and cert-manager ns ( #1263 )
...
* feat: update network and cert-manager ns
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update sops var name to be consistent with env
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-26 18:48:35 -05:00
Devin Buhl
e321b148a6
feat: removal of all addons ( #1247 )
...
* feat: removal of all addons
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update the mj script
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: remove the default namespace
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: remove descheduler and move reloader into flux-system
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-25 11:09:00 -05:00
Devin Buhl
5d849727d8
feat: implement mjfilter file for templates ( #1244 )
...
* feat: implement mjfilter file for templates
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: use data.get in mjfilters
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-24 14:52:50 -05:00
renovate[bot]
94449b8933
fix(helm): update chart cilium to 1.14.6 ( #1232 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-22 16:04:05 -05:00
Devin Buhl
afbf097dac
feat: update kube-vip ansible playbook for k0s and k3s - ipv6 config changes ( #1234 )
...
* feat: update kube-vip ansible playbook for k0s and k3s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update renovate
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: move ipv6 to advanced options
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: kube-vip manifests to partials
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: kube vip samesies
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update config sample
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-22 15:28:21 -05:00
Devin Buhl
ba83e9a3c3
feat: add spegel to core components ( #1225 )
...
* feat: add spegel to core components
Signed-off-by: Devin Buhl <devin@buhl.casa >
* downgrade: csi-smb-driver
Signed-off-by: Devin Buhl <devin@buhl.casa >
* more: change to smb
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-21 19:24:38 -05:00
Benjamin Runnels
8265c80909
fix: updated csi-drivers for k0s and simplified smb ( #1220 )
...
* updated csi-drivers for k0s and simplified smb
* Update addons.yaml
* fixed spegel variable typos
* Removed extra line ending
2024-01-21 17:34:34 -05:00
Devin Buhl
e1330d734c
feat: more changes to templating ( #1218 )
...
* feat: clean up more jinja default references
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: add additional tls sans force kube-vip on k3s
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-21 11:39:12 -05:00
Devin Buhl
b89b7b3ed9
feat: migrate to python for data validation ( #1214 )
...
* feat: migrate to python for data validation
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: address PR comments
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: add unused kwargs to validate functions
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: update renovate pip and ansible regex
Signed-off-by: Devin Buhl <devin@buhl.casa >
* feat: add bootstrap_nodes test
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update taskfiles
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-21 08:35:21 -05:00
Devin Buhl
1ec59d1559
feat: add advanced features to config ( #1208 )
...
* feat: add advanced features to config
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: only enable longhorn if distro is k3s or k0s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update ansible lint
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-20 12:27:20 -05:00
renovate[bot]
52aa4b5c89
fix(helm): update chart cilium to 1.14.6 ( #1198 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-19 21:28:37 -05:00
Devin Buhl
064fa3bed5
fix: add kubelet-csr-approver as partial
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-19 09:44:26 -05:00
Devin Buhl
8359f49dcc
fix: talos update providerRegex
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-19 09:38:35 -05:00
Devin Buhl
eed4faa9e6
fix: keep included k3s coredns ( #1197 )
...
* Delete bootstrap/templates/kubernetes/apps/kube-system/coredns directory
* Update kustomization.yaml.j2
* Delete bootstrap/templates/ansible/playbooks/templates/custom-coredns-helmchart.yaml.j2.j2
* Update cluster-installation.yaml.j2
* Delete bootstrap/templates/ansible/playbooks/tasks/coredns.yaml.j2
* Update main.yaml.j2
* Update main.yaml.j2
* Update main.yaml.j2
* Update main.yaml.j2
* Update cluster-installation.yaml.j2
2024-01-19 06:13:39 -05:00
Devin Buhl
91d8b84f3c
feat: add talos support ( #1192 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-19 05:36:25 -05:00
Devin Buhl
b8e09d5b52
fix: remove maxHistory from HelmReleases since the default is now 5
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-18 20:16:03 -05:00
Devin Buhl
0c4f0260d5
fix: ansible dir should only exist for k3s and k0s ( #1191 )
...
* fix: ansible dir should only exist for k3s and k0s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: rename partial files
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-18 13:52:11 -05:00
Devin Buhl
d46e7f9663
feat: add partial support, change k0s config filename, always use NLLB for k0s ( #1180 )
...
* feat: add partial support, change k0s config filename, always use NLLB for k0s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: update wording
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-18 08:38:03 -05:00
Devin Buhl
13a005d23d
feat: k3s use 127.0.0.1:6444 for Cilium k8sServiceHost:k8sServicePort
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-18 06:27:58 -05:00
Devin Buhl
ca9d1818fc
feat: add spegel support for k0s ( #1178 )
...
* feat: add spegel support for k0s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: add spegel to e2e tests
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update containerd file paths and run apply from k0s-config dir
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: move containerd files after upload
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-17 16:00:28 -05:00
Devin Buhl
646f335689
feat: change jinja variable start/end delimiters to avoid conflicts with go templating ( #1168 )
...
* feat: change jinja variable start/end delimiters to avoid conflicts with go templating
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: update comment in makejinja.toml
Signed-off-by: Devin Buhl <devin@buhl.casa >
* chore: update comment in makejinja.toml
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-16 09:25:12 -05:00
Devin Buhl
93c9d21581
feat: change jinja block/start delimiters for renovate support ( #1163 )
...
* feat: change jinja block/start delimiters for renovate support
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update renovate config an helm repos
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-15 19:31:45 -05:00
Devin Buhl
e6fbc6e128
feat: remove the need for raw jinja blocks ( #1158 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-15 00:03:41 -05:00
Devin Buhl
f9481d6202
feat: replace ansible templating with makejinja ( #1156 )
2024-01-14 23:03:02 -05:00
Devin Buhl
a4731906d9
feat: set lstrip on ansible template task and remove comments ( #1155 )
...
* feat: set lstrip on ansible template task and remove comments
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: cert-manager block was neing stripped
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2024-01-14 17:08:59 -05:00
Jory Irving
ee5de426a4
Replace Hajimari with Homepage ( #1127 )
...
* feat: replace hajimari with homepage
* fix: add secret
* fix: homepage configmap kubernetes widget
Signed-off-by: Jory Irving <jory@jory.dev >
* feat: wrap annotations in blocks
* chore: homepage change ingress to internal
Signed-off-by: Jory Irving <jory@jory.dev >
---------
Signed-off-by: Jory Irving <jory@jory.dev >
2024-01-11 15:05:24 -05:00
d093d0a4e1
add k0s support ( #1123 )
...
* ignore idea
* Initial work on support for k0s
* * Changed config param to bootstrap_distribution
* Replaced democratic-csi with openebs
* Added notes about system-upgrade-controller being ignored with k0s
* Removed password for nodes
* * Switched to single storage path for openebs
* Removed democratic-csi helm repo
* Added missing openebs helm repo
* Fixed template formatting
* Made bootstrap_private_github_repo hidden/undocumented
* Updated flux cluster config to accommodate bootstrap_private_github_repo
* * added the storageclass name to be declarative
* * added newline
* set chart wait false
* * fixed spacing in K0sTasks
* fixed openebs path
* properly added openebs helm repo
* * updated configure task to use venv
* renamed bootstrap_kube_vip_addr to bootstrap_kubeapi_addr
* renamed bootstrap_kube_vip_addr derived variables accordingly
* * tweaked configure task cmd
* started work on k0s-config.yaml template
* * tweaked k0s task cmd
* moved coredns under addons rather than optional
* fixed typo in coredns task
* normalized formatting in k0s-config
* disabled telemetry in k0s-config
* added renovate to k0s-config
* removed tunnel and added routing mode in k0s-config cilium chart values
* updated docs in config example
* fixed issue with k0s-config controller role so it didn't default to worker+controller if more than one master
* * fixed whitespace
* add k0sctl to brew tasks
* Update bootstrap/vars/config.sample.yaml
* Update bootstrap/vars/config.sample.yaml
* Update k0s-config.yaml.j2
* Update config.sample.yaml
* controllerManager and scheduler bind to `0.0.0.0` for metrics
* Update custom-cilium-helmchart.yaml.j2.j2
* Update helmvalues.yaml.j2
* Update bootstrap/tasks/addons/main.yaml
* first pass at readme updates
* update placement of k0sconfig options
* disable telemetry on k0sctl too
* disable k0s telemetry in env too
* update: jinja spacing in k0sconfig
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: ensure bootstrap_local_storage_path is delete on nuke
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update renovate regex for k3s/k0s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update nuke playbook and only include k3s task when k3s
Signed-off-by: Devin Buhl <devin@buhl.casa >
* fix: update nuke playbook and only include k3s task when k3s and include jinja comments
Signed-off-by: Devin Buhl <devin@buhl.casa >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
Co-authored-by: Devin Buhl <devin@buhl.casa >
2024-01-11 15:03:36 -05:00
renovate[bot]