infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,313 Commits 41 Branches 0 Tags
3c6f701b6a77358c6dd262352ea5f17cf13ee7bf
Commit Graph
1313 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl fe41cf6ea5 feat: move kubernetes dir into templates to support jinja2 across all files (#831) 2023-07-05 21:17:10 -04:00
Devin Buhl 7b0a154fed fix(ansible): keep apparmor installed but mask the service 
Also add task back in for updating `/etc/hosts` since hostname doesn't change this file
 2023-07-05 18:49:18 -04:00
Jory IrvingandDevin Buhl ff031182d6 chore: initial RPi considerations (#832) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-07-05 12:36:40 -04:00
Devin Buhl 0df7ec6526 feat!: debian 12 to the moon (#830) 2023-07-05 10:36:05 -04:00
Devin Buhl b714540000 fix: coredns is part of the docker oss program and not rate limited 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-05 08:27:28 -04:00
Devin Buhl a855b3024d fix: set rounds to 10 on weave password 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-05 08:21:17 -04:00
Devin Buhl 73bed06eba fix: use http2 for cloudflared 2023-07-05 03:59:42 -04:00
Devin Buhl 39643241f9 chore: use cmd in root taskfile 2023-07-04 20:21:11 -04:00
Devin Buhl 2f4b59c8aa fix: do not reboot twice when using taskfile to nuke 2023-07-04 20:01:39 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin Buhl fd1590efcc fix: actually deploy custom-cilium-l2.yaml.j2 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 18:00:15 -04:00
Jory Irving 913f0c036a fix key to be weave expects (#828) 2023-07-04 17:40:15 -04:00
Devin Buhl 9cd26e9d11 feat: manage the cilium l2 config with flux (#827) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 17:01:36 -04:00
Devin Buhl b0b54b31b0 fix: use fqcrdname for resource readiness 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:57:13 -04:00
Devin Buhl dbf7d878e9 fix: check for the existence of cloudflared 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:40:06 -04:00
Devin Buhl c95911eed4 fix: use shell instead of command when checking for CLI tools 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:37:37 -04:00
Devin Buhl 315659d196 chore: update requirements and stale container service 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:24:31 -04:00
Aumer 06c4405fa2 fix: Update hosts.yaml destination (#826) 
```[WARNING]: Unable to parse /home/Rodent/home-ops/ansible/inventory/hosts.yaml as an inventory source
ERROR! No inventory was parsed, please check your configuration and options.
task: Failed to run task "ansible:list": exit status 1```
 2023-07-04 14:56:59 -04:00
Jory Irving 3d014fa327 fix: add helm repo for coredns (#825) 2023-07-04 12:42:51 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822) 
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
 2023-07-04 11:36:58 -04:00
AumerandDevin Buhl 26164c7278 fix: Add hubble-ui hajimari icon (#823) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-07-04 09:35:18 -04:00
Devin Buhl 467af18b0f feat!: Drop Metallb in favor of Cilium L2Announcements (#821) 2023-07-03 14:47:51 -04:00
Devin Buhl 4905990750 fix(ansible): forgot to rename this file 2023-07-03 13:11:29 -04:00
Devin Buhl 46d68b8d95 feat(ansible): Deploy coredns with HelmChart instead of builtin method and other small QoL changes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-03 11:30:13 -04:00
renovate[bot] df96293874 fix(ansible): update community.sops to 1.6.4 (#811) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-03 07:58:16 -04:00
renovate[bot] 2053913767 fix(github-release): update k3s-io/k3s to v1.27.3+k3s1 (#812) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-03 07:58:10 -04:00
renovate[bot] 77eff93f3c fix(helm): update chart grafana to 6.57.4 (#813) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-03 07:57:53 -04:00
renovate[bot] d0ebbf2507 fix(helm): update chart reloader to 1.0.29 (#815) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-03 07:57:47 -04:00
renovate[bot] f84fdd9364 feat(container): update image kube-prometheus-stack to v47.1.0 (#816) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-03 07:57:39 -04:00
renovate[bot] 8ff268ca9e fix(helm): update chart ingress-nginx to 4.7.1 (#814) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-03 07:57:30 -04:00
Devin Buhl 1be064692d feat: Keep kube-vip-rbac and delete stale addon resources 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 17:56:29 -04:00
Devin Buhl 6442ac02cf feat(ansible): remove dep cilium-cli and update nuke playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 11:33:54 -04:00
Devin Buhl 3dcec5faaa feat(ansible): Add stale container weekly systemd timer 2023-07-01 11:18:25 -04:00
Devin Buhl 8d67a5988b fix: do not manage Foreign Routes or Foreign Routing Rules 2023-07-01 08:09:02 -04:00
renovate[bot] 7c9233de30 feat(github-action): update release-drafter/release-drafter action to v5.24.0 2023-07-01 03:36:09 +00:00
renovate[bot] 25c9ce18d1 feat(github-action): update actions/labeler action to v4.2.0 2023-07-01 03:35:52 +00:00
Devin Buhl 635113c9f6 feat: remove pre-commit from template (#810) 2023-06-30 09:09:53 -04:00
Devin Buhl 5a531b1d15 fix: set grafana deploymentStrategy to Recreate 2023-06-29 18:03:53 -04:00
Devin Buhl 260aefc5d0 chore: Update README.md 2023-06-29 12:40:17 -04:00
Devin Buhl a15dd621c4 chore: remove comments on swapping certs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-29 12:32:17 -04:00
Tom WithersandDevin Buhl 3938d8ca7e fix(metallb): Disable frr by default (#809) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-06-29 07:59:21 -04:00
Alex LehmanandDevin Buhl 54bbcdb816 Check if ufw is installed before attempting to disable it (#807) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-06-25 09:21:18 -04:00
renovate[bot] f382b5516d fix(container): update image weave-gitops to v4.0.24 (#806) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-06-23 20:14:40 -04:00
renovate[bot]andDevin Buhl bb9168eb17 feat(container)!: Update image kube-prometheus-stack to v47 (#804) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-06-20 19:28:27 -04:00
renovate[bot] 05d5ae0444 feat(ansible): update community.general to 7.1.0 (#803) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-06-20 19:25:51 -04:00
renovate[bot] 77457fbbe1 fix(container): update image docker.io/cloudflare/cloudflared to v2023.6.1 (#801) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-06-20 08:01:18 -04:00
renovate[bot] 22ecc29f66 fix(helm): update chart grafana to 6.57.3 (#802) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-06-20 08:01:11 -04:00
Adam Petrovic af9dc565ed Update xargs argument in cluster tasks (#800) 
`xargs -L1` is equivalent and compatible with all platforms to `xargs -l` which is only gnu xargs specific. 

`xargs -l` is equivalent to `xargs -L1`
 2023-06-19 12:47:31 -04:00
Devin Buhl d7f1a8b2a7 feat: add ingress-nginx to dependencies for certain HRs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 09:08:33 -04:00
Devin Buhl c1c42b9d7d chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:30:58 -04:00