infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
2,145 Commits 41 Branches 0 Tags
6411509d2911b2abaac76e4931f97cb061b0a71d
Commit Graph
626 Commits
Author SHA1 Message Date
renovate[bot] 34cd3d2f99 fix(helm): update chart cilium to 1.15.3 (#1391) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-27 19:31:20 -04:00
Devin Buhl ca6145f938 fix(openebs): disable ndm-operator 2024-03-27 14:44:02 -04:00
Jean-François RoyandDevin Buhl 1a9c37c910 fix(metrics-server): Remove --kubelet-insecure-tls (#1389) 
* fix(metrics-server): Remove --kubelet-insecure-tls

According to https://www.talos.dev/v1.6/kubernetes-guides/configuration/deploy-metrics-server, this flag is not necessary when enabling certificate rotation and an auto CSR approver.

* Update helmrelease.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-27 12:56:43 -04:00
Devin Buhl d3a4b10641 Revert "Fix cilium to use k3s paths for binPath and confPath" (#1388) 2024-03-26 11:30:54 -04:00
Devin Buhl 94cffb45e3 feat: add a few more config validations 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-03-26 08:48:46 -04:00
Devin Buhl 49a77bec2a fix(talos): add deps to helmfile so that cilium installs first 2024-03-25 15:55:47 -04:00
Jean-François RoyandDevin Buhl 13f4f99992 feat: Support remotely-managed cloudflare tunnels (#1378) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-25 12:27:51 -04:00
renovate[bot] ec76be1b52 fix(container): update image ghcr.io/siderolabs/installer to v1.6.7 (#1385) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-20 19:21:08 -04:00
renovate[bot] a5cea2ce28 feat(container): update image docker.io/cloudflare/cloudflared to v2024.3.0 (#1383) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-20 08:19:14 -04:00
renovate[bot] 986cf0d0eb fix(helm): update chart reloader to 1.0.71 (#1382) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-20 08:19:07 -04:00
Petr ŘehořandDevin Buhl c6833e0b24 Fix cilium to use k3s paths for binPath and confPath (#1381) 
* Update cilium-values-init.partial.yaml.j2

* Update cilium-values-full.partial.yaml.j2

* Update cluster-nuke.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-20 08:05:51 -04:00
Jean-François Roy 5fa7c0d4f6 feat: Make the cluster name configurable (#1379) 2024-03-20 05:51:15 -04:00
Jean-François Roy d09d856920 fix: Update deprecated allowSchedulingOnMasters field to allowSchedulingOnControlPlanes (#1380) 2024-03-20 05:48:55 -04:00
Petr Řehoř 92e8d7212f Add kernel modules required by cilium (#1377) 
According to the errors in the logs, cillium also requires the following modules
- iptable_mangle
- iptable_raw
- xt_socket
 2024-03-19 08:45:52 -04:00
Devin Buhl 8610430e95 fix: remove some config to keep things simple 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-03-19 07:59:45 -04:00
Devin Buhl b275b781fd feat(talos): change from net.ifnames to a macaddr deviceSelector (#1376) 
* feat(talos): change from net.ifnames to a macaddr deviceSelector

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derpge

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: logic is easier to follow now questionmark

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: logic is easier to follow now questionmark

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-03-18 19:06:19 -04:00
renovate[bot] 91a9890a91 fix(container): update image ghcr.io/siderolabs/kubelet to v1.29.3 (#1375) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-18 17:21:13 -04:00
Wasurerarenai 75f49dd3b6 Update echo-server app-template ingress' v3 service identifier (#1374) 2024-03-16 07:45:30 -04:00
renovate[bot] 78d588224a fix(container): update image registry.k8s.io/kubectl to v1.29.3 (#1372) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-15 10:24:30 -04:00
renovate[bot] 0c9a9e1a21 fix(container): update image app-template to v3.0.4 (#1371) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-15 10:24:21 -04:00
renovate[bot] 1656c05156 fix(helm): update chart cilium to 1.15.2 (#1369) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-14 10:44:22 -04:00
renovate[bot]andDevin Buhl 63f30c7d9f feat(container)!: Update image app-template to v3 (#1370) 
* feat(container)!: Update image app-template to v3

* Update helmrelease.yaml.j2

* Update helmrelease.yaml.j2

* Update helmrelease.yaml.j2

* Update README.md

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-14 10:32:14 -04:00
renovate[bot] 499b80aa30 chore(deps): update ansible-lint to 24.2.1 (#1368) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-14 10:25:30 -04:00
renovate[bot] c58eef71da feat(helm): update chart k8s-gateway to 2.4.0 (#1365) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-11 21:39:34 -04:00
renovate[bot] 7f0a2e8d90 fix(container): update image ghcr.io/siderolabs/installer to v1.6.6 (#1360) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-10 14:19:10 -04:00
renovate[bot] 9f0cea409e fix(helm): update chart cert-manager to v1.14.4 (#1362) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-10 14:16:50 -04:00
renovate[bot] 0c6e944090 fix(github-release): update k3s-io/k3s to v1.29.2+k3s1 (#1361) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-10 14:16:38 -04:00
renovate[bot] c9c9e9cce7 fix(ansible): update kubernetes.core to 3.0.1 (#1359) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-10 14:16:21 -04:00
Devin Buhl dff0eb75ac fix: keepHistory is false by default 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-03-06 08:26:49 -05:00
Stephen BonnellandDevin Buhl d105410b6b feat!(kube-vip): Enable flux taking over kube-vip post-deployment. (#1357) 
* feat!(kube-vip): Enable flux taking over kube-vip post-deployment.

* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/app/kustomization.yaml.j2

* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/app/kustomization.yaml.j2

* Update daemonset.yaml.j2

* Update rbac.yaml.j2

* Update bootstrap/templates/kubernetes/apps/kube-system/kustomization.yaml.j2

* Update kustomization.yaml.j2

* Update kustomization.yaml.j2

* Create .mjfilter.py

* Update bootstrap/templates/ansible/playbooks/cluster-installation.yaml.j2

* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/ks.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-06 08:19:51 -05:00
Jakub JędrzejczykandDevin Buhl d1b5fa1c98 Add the option for assigning a specific SSH key to a node. (#1356) 
* Add the option for specifying an SSH key.

* Add ability to specify SSH key.

* Update config.sample.yaml

* Update config.sample.yaml

* Update bootstrap/templates/ansible/inventory/hosts.yaml.j2

* Update bootstrap/templates/ansible/inventory/hosts.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-04 15:57:47 -05:00
Devin Buhl e6f8f4dd33 fix(k3s): update args in k3s controllers plan 2024-03-02 14:30:24 -05:00
renovate[bot] 0011fc924f fix(container): update system upgrade controller group to v0.13.4 (#1355) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-01 21:13:48 -05:00
renovate[bot] 1a97870ecc fix(container): update system upgrade controller group to v0.13.3 (patch) (#1352) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-29 09:40:36 -05:00
renovate[bot] 650f6cfc9f feat(helm): update chart ingress-nginx to 4.10.0 (#1351) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-29 09:16:39 -05:00
renovate[bot] 6fc5adebba feat(ansible): update community.general to 8.4.0 (#1348) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-28 17:49:28 -05:00
renovate[bot] 3f4d31916b chore(deps): update ansible to 9.3.0 (#1347) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-28 17:49:20 -05:00
Devin Buhl cdfb1d0176 fix: update kube-vip to v0.7.1 and set lb_enable to true 2024-02-26 16:15:48 -05:00
Devin Buhl 5a41f4ddaf fix(openebs): disable ndm 2024-02-26 07:24:23 -05:00
renovate[bot] 08676e183c fix(helm): update chart reloader to 1.0.69 (#1345) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-23 07:37:03 -05:00
renovate[bot] 3306457c63 fix(helm): update chart cert-manager to v1.14.3 (#1344) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-23 07:36:56 -05:00
renovate[bot] 7284472636 fix(container): update image ghcr.io/siderolabs/installer to v1.6.5 (#1342) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-23 07:36:44 -05:00
renovate[bot] 129432ae42 fix(container): update image docker.io/cloudflare/cloudflared to v2024.2.1 (#1341) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-23 07:36:33 -05:00
Petr Řehoř 0083f7b875 Fix cluster-kube-vip playbook (#1338) 2024-02-19 15:26:44 -05:00
Devin Buhl b389bbe038 fix(talos): remove system-upgrade-controller (#1337) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-19 14:18:11 -05:00
JJGadgets 8a6f98ae6c fix(cilium): disable BPF masquerade (#1334) 
* fix(cilium): disable BPF masquerade

It could cause issues/complications with more advanced networking configuration on the host (e.g. using FRR OpenFabric for host-level routing between nodes, or using other eBPF apps with Cilium). 

There's also no real advantage to using in homelab, so it should be safer to disable this.

* fix(cilium): disable BPF masquerade

It could cause issues/complications with more advanced networking configuration on the host (e.g. using FRR OpenFabric for host-level routing between nodes, or using other eBPF apps with Cilium).

There's also no real advantage to using in homelab, so it should be safer to disable this.
 2024-02-17 17:54:37 -05:00
renovate[bot] a73b54f014 feat(container): update image app-template to v2.6.0 (#1325) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:57 -05:00
renovate[bot] 8d320e5fec fix(container): update image ghcr.io/siderolabs/kubelet to v1.29.2 (#1327) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:49 -05:00
renovate[bot] e38e371719 fix(container): update image spegel to v0.0.18 (#1328) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:33 -05:00
renovate[bot] df33bd4836 fix(helm): update chart kubelet-csr-approver to 1.0.7 (#1329) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:26 -05:00