infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,232 Commits 41 Branches 0 Tags
4fbcba348f90586e262f954ed5036287710eb268
Commit Graph
54 Commits
Author SHA1 Message Date
Devin Buhl 4fbcba348f fix(ansible): in the case of cluster-installation playbook failure still clean up helmchart resources on next run 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-10 13:33:20 -04:00
Devin Buhl 965a294943 fix: Cilium l2announcements lease config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-07 09:15:16 -04:00
Devin Buhl ff5e52559b fix: set coredns label override and service name 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 18:06:48 -04:00
Devin Buhl 14d72ae55a fix(ansible): use localhost when getting repository path for kubeconfig 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 09:08:50 -04:00
Devin Buhl fe41cf6ea5 feat: move kubernetes dir into templates to support jinja2 across all files (#831) 2023-07-05 21:17:10 -04:00
Devin Buhl 7b0a154fed fix(ansible): keep apparmor installed but mask the service 
Also add task back in for updating `/etc/hosts` since hostname doesn't change this file
 2023-07-05 18:49:18 -04:00
Devin Buhl 0df7ec6526 feat!: debian 12 to the moon (#830) 2023-07-05 10:36:05 -04:00
Devin Buhl b714540000 fix: coredns is part of the docker oss program and not rate limited 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-05 08:27:28 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin Buhl 9cd26e9d11 feat: manage the cilium l2 config with flux (#827) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 17:01:36 -04:00
Devin Buhl b0b54b31b0 fix: use fqcrdname for resource readiness 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:57:13 -04:00
Devin Buhl 315659d196 chore: update requirements and stale container service 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:24:31 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822) 
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
 2023-07-04 11:36:58 -04:00
Devin Buhl 467af18b0f feat!: Drop Metallb in favor of Cilium L2Announcements (#821) 2023-07-03 14:47:51 -04:00
Devin Buhl 46d68b8d95 feat(ansible): Deploy coredns with HelmChart instead of builtin method and other small QoL changes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-03 11:30:13 -04:00
Devin Buhl 1be064692d feat: Keep kube-vip-rbac and delete stale addon resources 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 17:56:29 -04:00
Devin Buhl 6442ac02cf feat(ansible): remove dep cilium-cli and update nuke playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 11:33:54 -04:00
Devin Buhl 3dcec5faaa feat(ansible): Add stale container weekly systemd timer 2023-07-01 11:18:25 -04:00
Devin Buhl 8d67a5988b fix: do not manage Foreign Routes or Foreign Routing Rules 2023-07-01 08:09:02 -04:00
Alex LehmanandDevin Buhl 54bbcdb816 Check if ufw is installed before attempting to disable it (#807) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-06-25 09:21:18 -04:00
renovate[bot] 9651e15d0a fix(helm): update chart cilium to 1.13.4 (#799) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-06-17 08:21:36 -04:00
Devin Buhl adf08cb348 fix: renovate the k3s cilium helm chart 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:13:42 -04:00
Devin Buhl 746f49e028 fix(ansible): only run certain tasks on k3s_primary_control_node 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 07:48:59 -04:00
Devin Buhl e380868795 fix: only force delete Cilium HelmChart if it exists 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-15 15:09:51 -04:00
Devin Buhl 3116a10429 fix: k3s not cleaning up the cilium helmchart 2023-06-12 19:36:36 -04:00
Devin Buhl b539157979 fix: use wait: true on cilium helmchart removal 2023-06-11 20:34:12 -04:00
Devin Buhl 4ae51b0db8 feat: Remove Fedora server as supported OS (#774) 2023-06-05 11:15:34 -04:00
Devin Buhl 6db540671a fix: do not use serviceAccountName in kube-vip static pod 2023-05-31 12:03:18 -04:00
Jory IrvingandDevin Buhl dc606c984e fix: change Cilium IPAM mode to kubernetes (#762) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-05-31 11:55:34 -04:00
Devin Buhl 3c0f5554a9 fix: speed up nuke playbook by preventing k3s from starting on next reboot 2023-05-30 17:19:58 -04:00
Devin Buhl 8db5c1abcd fix: add playbook to upgrade kube-vip 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-30 17:00:55 -04:00
Devin Buhl 7a54ce1a0f fix: add cilium-cli to prepare playbook and cilium uninstall to nuke playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-30 15:10:14 -04:00
Devin Buhl 0d03b598b7 fix: allow cilium HelmChart to be renovated 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-29 20:39:03 -04:00
renovate[bot]andDevin Buhl 68676349c3 fix(helm): update chart cilium to 1.13.3 (#757) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-05-29 09:57:55 -04:00
Devin Buhl d8aea6de29 feat: allow flux to take over cilium (#755) 2023-05-29 09:38:06 -04:00
Devin Buhl 2899466303 feat!: replace calico with cilium (#740) 2023-05-28 11:23:09 -04:00
Devin Buhl edb3b21310 fix: ansible error when trying to delete files 2023-05-27 17:34:31 -04:00
Devin Buhl 00798e85e8 feat: always delete custom- prefixed files from k3s_server_manifests_dir 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-27 08:21:29 -04:00
renovate[bot] 969e297bd5 feat(container): update image ghcr.io/kube-vip/kube-vip to v0.6.0 (#737) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-05-19 09:14:50 -04:00
Devin Buhl 3c0cefe264 fix: prefix custom manifests with custom- and bump prom operator crd versions 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-08 15:08:56 -04:00
Devin Buhl 9043eddd45 fix: set containerIPForwarding to Enabled in Calico config 2023-04-29 14:45:54 -04:00
renovate[bot] 8acc1cc416 fix(container): update image ghcr.io/kube-vip/kube-vip to v0.5.12 (#696) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-04-15 00:32:43 -04:00
Devin Buhl 07decda9b4 Revert "feat: Disable kube-proxy and enable Calico in eBPF mode" (#678) 2023-03-27 17:29:10 -04:00
Devin Buhl 92f2a92cda feat: Disable kube-proxy and enable Calico in eBPF mode (#677) 2023-03-25 19:54:02 -04:00
renovate[bot] 9bd1776faa fix(container): update image ghcr.io/kube-vip/kube-vip to v0.5.11 (#652) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-03-03 23:30:37 -05:00
renovate[bot] c6cbf0a150 fix(container): update image ghcr.io/kube-vip/kube-vip to v0.5.10 (#638) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-02-25 05:54:55 -05:00
renovate[bot] fff9ad8bf3 fix(container): update image ghcr.io/kube-vip/kube-vip to v0.5.9 (#629) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-02-10 21:05:57 -05:00
Alex Graber f3b5425269 add ipvs kernel modules for kube-vip (#612) 
Signed-off-by: ahgraber <ahgraber@ninerealmlabs.com>

Signed-off-by: ahgraber <ahgraber@ninerealmlabs.com>
 2023-01-25 18:34:31 -05:00
renovate[bot] 9afafc7d96 fix(container): update image ghcr.io/kube-vip/kube-vip to v0.5.8 (#607) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-01-20 23:48:05 -05:00
Devin Buhl 4b9b69eb41 fix: remove cluster rollout playbook for now since it doesn't work and I don't know how to make it work 2023-01-13 14:47:30 -05:00