Commit Graph
70 Commits
Author SHA1 Message Date
Devin Buhl 5a90397ed5 fix: use requires in taskfiles when needed (#1201)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-19 07:49:38 -05:00
Devin Buhl 91d8b84f3c feat: add talos support (#1192)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-19 05:36:25 -05:00
Devin Buhl 7c43fb1db0 feat: k0s add reset hooks for cleaning up cilium (#1183)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-18 10:12:03 -05:00
Devin Buhl d46e7f9663 feat: add partial support, change k0s config filename, always use NLLB for k0s (#1180)
* feat: add partial support, change k0s config filename, always use NLLB for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update wording

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-18 08:38:03 -05:00
Devin Buhl 8b20e9e944 fix: encrypt sops files that are not already encrypted in sops task
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-17 20:45:36 -05:00
Devin Buhl ca9d1818fc feat: add spegel support for k0s (#1178)
* feat: add spegel support for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: add spegel to e2e tests

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update containerd file paths and run apply from k0s-config dir

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: move containerd files after upload

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-17 16:00:28 -05:00
Devin Buhl edbcf28139 feat: add python version check (#1176)
* feat: add python version check

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: formatting

Signed-off-by: Devin Buhl <devin@buhl.casa>

* test python 3.10

* chore: taskfile formating

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: python 3.11 is minimum

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-16 21:13:58 -05:00
Devin Buhl 528508e834 feat: add ansible lint, update taskfiles, and makejinja to not strip trailing newlines (#1172)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-16 14:23:08 -05:00
Devin Buhl b602a7a1f5 fix: update makeninja - rename Archfile - check for k0sctl (#1161)
* fix: update makeninja

* Update Taskfile.yaml

* fix: check for k0sctl when k0s is choosen

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-15 15:39:37 -05:00
Devin Buhl 2ad3d87b06 fix: update Ansible taskfile (#1160) 2024-01-15 12:27:02 -05:00
Devin Buhl ea31a49817 feat: add kubeconform workflow and make kubeconform/kustomize required (#1159) 2024-01-15 09:42:50 -05:00
Devin Buhl e6fbc6e128 feat: remove the need for raw jinja blocks (#1158)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-15 00:03:41 -05:00
Devin Buhl f9481d6202 feat: replace ansible templating with makejinja (#1156) 2024-01-14 23:03:02 -05:00
Devin Buhl ef44ea1b2b chore: add ci tests for k0s (#1152) 2024-01-14 12:11:39 -05:00
Devin Buhl 3b1ea970b1 fix: Updates to taskfiles and e2e workflow (#1144) 2024-01-13 12:04:44 -05:00
Devin Buhl 2f9e6068d3 feat: attempt to add a e2e workflow (#1143)
* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-12 22:41:03 -05:00
Devin Buhl e34899bfe2 fix: annotations not rendering correctly and add kubeconform integration
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-12 16:58:22 -05:00
Devin Buhl 7bd55db995 fix: ansible taskfile ad-hoc tasks now have preconditions
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-12 16:23:14 -05:00
Devin Buhl c0ca6be2ba fix: ansible taskfile ad-hoc tasks now work
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-12 16:20:23 -05:00
Devin Buhl 1ff3c252ca feat: add repo taskfile for cleaning up repo
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-12 08:55:27 -05:00
Devin Buhl f7eda7f8ec fix: k0s reset task 2024-01-11 18:23:56 -05:00
Devin Buhl 9f5999eaac fix: PYTHON_BIN not being set 2024-01-11 18:23:20 -05:00
Devin Buhl c8ebab7508 feat: do not template out k3s ansible when k0s is choosen
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-11 16:46:36 -05:00
d093d0a4e1 add k0s support (#1123)
* ignore idea

* Initial work on support for k0s

* *  Changed config param to bootstrap_distribution
*  Replaced democratic-csi with openebs
*  Added notes about system-upgrade-controller being ignored with k0s
*  Removed password for nodes

* *  Switched to single storage path for openebs
*  Removed democratic-csi helm repo
*  Added missing openebs helm repo
*  Fixed template formatting
*  Made bootstrap_private_github_repo hidden/undocumented
*  Updated flux cluster config to accommodate bootstrap_private_github_repo

* *  added the storageclass name to be declarative

* *  added newline
*  set chart wait false

* *  fixed spacing in K0sTasks
*  fixed openebs path
*  properly added openebs helm repo

* *  updated configure task to use venv
*  renamed bootstrap_kube_vip_addr to bootstrap_kubeapi_addr
*  renamed bootstrap_kube_vip_addr derived variables accordingly

* *  tweaked configure task cmd
*  started work on k0s-config.yaml template

* *  tweaked k0s task cmd
*  moved coredns under addons rather than optional
*  fixed typo in coredns task
*  normalized formatting in k0s-config
*  disabled telemetry in k0s-config
*  added renovate to k0s-config
*  removed tunnel and added routing mode in k0s-config cilium chart values
*  updated docs in config example
*  fixed issue with k0s-config controller role so it didn't default to worker+controller if more than one master

* *  fixed whitespace

* add k0sctl to brew tasks

* Update bootstrap/vars/config.sample.yaml

* Update bootstrap/vars/config.sample.yaml

* Update k0s-config.yaml.j2

* Update config.sample.yaml

* controllerManager and scheduler bind to `0.0.0.0` for metrics

* Update custom-cilium-helmchart.yaml.j2.j2

* Update helmvalues.yaml.j2

* Update bootstrap/tasks/addons/main.yaml

* first pass at readme updates

* update placement of k0sconfig options

* disable telemetry on k0sctl too

* disable k0s telemetry in env too

* update: jinja spacing in k0sconfig

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ensure bootstrap_local_storage_path is delete on nuke

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate regex for k3s/k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update nuke playbook and only include k3s task when k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update nuke playbook and only include k3s task when k3s and include jinja comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
Co-authored-by: Devin Buhl <devin@buhl.casa>
2024-01-11 15:03:36 -05:00
Devin Buhl a7eadd34b1 feat!: refactor taskfiles and update README
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-06 13:46:32 -05:00
Devin Buhl f9a7307f76 feat: move installing prom operator crds to taskfile
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-06 09:22:43 -05:00
Devin Buhl 2a70283539 add k9s to brew packages 2023-12-30 21:56:49 -05:00
Petr Řehoř b2a2b61629 Install jq in task brew:deps (#1108)
bootstrap/vars/config.yaml instructs to extract cloudflare tunnel parameters using jq.
2023-12-30 18:06:13 -05:00
1f55147125 feat: add support for cluster user secrets and settings (#858)
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
Co-authored-by: Devin Buhl <devin@buhl.casa>
2023-07-24 16:32:33 -04:00
Devin Buhl e64793f367 chore: task certificatereq is part of certificates task 2023-07-20 15:43:07 -04:00
Devin Buhl 571a7454c0 refactor: install ansible with Python venv (#863) 2023-07-19 11:03:59 -04:00
Devin Buhl c48083ca6b fix: cloudflared brew package 2023-07-19 07:32:10 -04:00
Devin Buhl 42e4de3eac feat: add bootstrap_acme_enable_production_certs config var
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-15 15:25:27 -04:00
Arthur Zapparoli c7f10b0c6d fix: brew dips - install yq (#846)
yq is used in the README, when pulling Flux webhook token
2023-07-11 16:53:16 -04:00
Devin Buhl 0d17e11709 feat!: change some task names for better user experiance
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 16:29:17 -04:00
Devin Buhl 2f4b59c8aa fix: do not reboot twice when using taskfile to nuke 2023-07-04 20:01:39 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822)
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
2023-07-04 11:36:58 -04:00
Devin Buhl 635113c9f6 feat: remove pre-commit from template (#810) 2023-06-30 09:09:53 -04:00
Adam Petrovic af9dc565ed Update xargs argument in cluster tasks (#800)
`xargs -L1` is equivalent and compatible with all platforms to `xargs -l` which is only gnu xargs specific. 

`xargs -l` is equivalent to `xargs -L1`
2023-06-19 12:47:31 -04:00
Aumer 3e665a7a5c Remove AnsibleTask no longer in use (#781) 2023-06-11 07:48:09 -04:00
Devin Buhl 3743149bac chore: rework cluster:reconcile task 2023-06-01 16:06:09 -04:00
Devin Buhl 8db5c1abcd fix: add playbook to upgrade kube-vip
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-05-30 17:00:55 -04:00
Steven KreitzerandDevin Buhl 145f575fbb feat!: add mandatory cloudflare tunnel support (#716)
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2023-05-04 19:39:22 -04:00
Devin Buhl 7a7107d4bf chore: use ROOT_DIR for taskfiles
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-01-13 17:07:06 -05:00
Devin Buhl fcd9f67cbb fix(taskfile): remove reconcile in install task, this should be happening already 2023-01-11 10:19:10 -05:00
Devin Buhl 3b0ca9ff53 chore: housekeeping
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-01-10 20:25:14 -05:00
Devin Buhl 2ae3bc7cba fix: add pip3 docs and use pip3 to install the openshift lib
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-01-09 14:50:46 -05:00
Devin Buhl 0e4bf5d499 feat: add cluster-rollout-reboot playbook
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-01-09 13:41:01 -05:00
Lord Helm f6a4be3661 remove sops tasks (#579) 2023-01-05 18:51:56 -05:00