infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
926 Commits 41 Branches 0 Tags
7cdf4096dded41c73dfd962ba10cb081fd25e3de
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl 7cdf4096dd chore(renovate): match kubernetes manifests in the ansible dir 2023-01-20 23:47:01 -05:00
Devin Buhl 4b9b69eb41 fix: remove cluster rollout playbook for now since it doesn't work and I don't know how to make it work 2023-01-13 14:47:30 -05:00
Devin Buhl 458fe7e703 fix(taskfile): add SOPS_AGE_KEY_FILE to env 2023-01-11 10:24:07 -05:00
Devin Buhl fcd9f67cbb fix(taskfile): remove reconcile in install task, this should be happening already 2023-01-11 10:19:10 -05:00
Devin Buhl 2acebc1a9f chore: update readme 2023-01-11 10:18:13 -05:00
Devin Buhl 2acbbefd15 chore: another fedora and ubuntu update in readme 2023-01-08 11:10:27 -05:00
Devin Buhl 9b1740a8e4 chore: mention ubuntu and fedora in places 2023-01-08 11:03:08 -05:00
Devin Buhl 27f660addc fix: add nfs-common to ubuntu packages 2023-01-07 23:53:51 -05:00
Devin Buhl 040ac65aa3 chore: use org level funding 2023-01-06 15:07:29 -05:00
Devin Buhl 2a26756dcb chore: update lycheeignore 2023-01-05 13:42:23 -05:00
Devin Buhl 203814adff chore: update README to mention age/cloudflare secrets are filled out in a following step 2023-01-04 16:58:36 -05:00
Devin Buhl 04611fc740 feat: add raspi packages 2023-01-02 19:44:16 -05:00
Devin Buhl 5af6faac47 chore: create funding file since org level funding ain't workin' 2023-01-01 09:42:40 -05:00
Devin Buhl 08040e3e49 fix: update ingress on hajimari 2022-12-24 17:10:27 -05:00
Devin Buhl 0a5dfb361e fix: update ingress on echo server 2022-12-24 17:07:18 -05:00
Devin Buhl ffa402f5e3 chore: auto merge branch style 2022-12-24 10:53:54 -05:00
Devin Buhl 8f3f4d8fc7 chore: use automergeType of pr to include in release notes 2022-12-23 14:05:49 -05:00
Devin Buhl 7d8e5a2f9a chore: change renovate schedule to run every saturday 2022-12-23 13:52:58 -05:00
Devin Buhl f0c2c84dd9 chore: add links to sops and yq 2022-12-23 10:53:55 -05:00
Devin Buhl e4549637b0 chore: add release workflow 2022-12-22 16:55:17 -05:00
Devin Buhl cb7d280363 chore: update release drafter config 2022-12-22 16:54:07 -05:00
Devin Buhl 1171730e06 chore: add type break label 2022-12-22 16:52:56 -05:00
Devin Buhl 26cc95a9aa chore: run labeler on PRs 2022-12-22 11:22:03 -05:00
Devin Buhl 229a533718 chore: add weave-gitops to require cli tools 2022-12-21 14:23:52 -05:00
Devin Buhl 4e6edcc66a feat!: Refector directories and flux apps (#559) 2022-12-21 14:22:18 -05:00
Devin Buhl 4c0199813d chore: add editorconfig 2022-12-17 15:59:13 -05:00
Devin Buhl a1d6840205 feat: use quay registry for calico 2022-12-16 21:29:25 -05:00
Devin Buhl 8df54c5dca fix: ffs 2022-12-16 19:19:12 -05:00
Devin Buhl 183d6c48d6 chore: remove wiki reference 2022-12-16 17:55:10 -05:00
Devin Buhl 9932f2705c fix: indentation 2022-12-15 17:36:33 -05:00
Devin Buhl f10ca0bcba Remove swap and ufw options (#554) 
* remove options from playbook

* remove options from vars

* prom file names
 2022-12-14 04:19:45 -05:00
Devin Buhl 88decb875f feat: add resource readiness check to cluster-installation playbook (#547) 2022-12-09 11:58:51 -05:00
Devin Buhl 68dae9b222 fix: reduce calico version 
https://github.com/projectcalico/calico/issues/7003
 2022-11-25 21:42:38 -05:00
Devin Buhl 64acf02d09 fix: pin calico to specific manifest 2022-11-25 21:36:19 -05:00
Devin Buhl fc26547bf1 fix: remove extra steps in cluster-prepare playbook that are not needed 2022-11-22 11:54:44 -05:00
Devin Buhl 20ca38c35d fix: remove some extra fedora packages that are not required 2022-11-22 11:53:43 -05:00
Devin Buhl 47a28ae016 fix: deprecation warnings on ipaddr 2022-11-04 09:46:17 -04:00
Devin Buhl effd4dd950 fix: add calico configuration to hopefully select the right NIC on basic setups 2022-11-04 09:38:02 -04:00
Devin Buhl 6d22dfdb33 fix: add hr-restart task 2022-10-22 09:17:32 -04:00
Devin Buhl 482a5a3afe fix: use networking ns for cert manager secret 2022-10-22 08:44:51 -04:00
Devin Buhl 4cf34653cb fix: control nodes not given the right filename when using prefix 2022-10-21 14:39:51 -04:00
Devin Buhl 9b3e9341ca fix: use networking namespace for metallb CRs 2022-10-09 09:08:45 -04:00
Devin Buhl e95b9044ad chore: disable renovate kubernetes-api datasource 2022-10-07 13:09:03 -04:00
Devin Buhl d5769a972a fix: do not pin hajimari verison in helmrelease 2022-10-07 13:06:57 -04:00
Devin Buhl 3d4e728d65 fix: metallb psp indentation 2022-09-27 18:58:40 -04:00
Devin Buhl 00ae67d729 fix: do not create metallb psp 2022-09-27 18:58:10 -04:00
Devin Buhl fad9dd54ee feat: bump calico to v3.24 2022-09-20 13:27:50 -04:00
Devin Buhl ce44dd1c5d chore: fix up readme again 2022-09-05 08:53:47 -04:00
Devin Buhl 2e2746daea chore: make README clear about most recent CLI tools 2022-09-05 08:52:52 -04:00
Devin Buhl 229c3000c9 chore: update comment about pruning manifests 2022-08-19 18:09:02 -04:00
Devin Buhl 0a3bc812c9 fix: kube vip rbac use dot not dash 2022-08-18 11:11:08 -04:00
Devin Buhl a62a2752fd fix: kube-vip changes for k8s 1.24 2022-08-18 11:08:52 -04:00
Devin Buhl cdea056ca2 fix: add tflint to configure verify 2022-07-25 21:47:41 -04:00
Devin Buhl d41a82c572 fix: add tflint to brew install 2022-07-25 21:45:56 -04:00
Devin Buhl 8763fadb74 fix: add rebootSentinelCommand to kured for fedora (split on new line) 2022-07-25 16:25:00 -04:00
Devin Buhl 51c33bc113 fix: add rebootSentinelCommand to kured for fedora 2022-07-25 16:24:19 -04:00
Devin Buhl 2d8fcb6e10 fix: use ghcr for flux images 2022-07-20 08:03:09 -04:00
Devin Buhl 0c6c66ce85 chore(readme): add reading material section 2022-07-17 08:41:16 -04:00
Devin Buhl f80ab355b0 fix: patch out the flux netpols 2022-07-16 18:55:18 -04:00
Devin Buhl 2313461f93 fix: update resources in receiver 2022-07-12 09:09:16 -04:00
Devin Buhl 650b8a8810 fix(ansible): set remote_tmp to /tmp 2022-07-12 09:07:31 -04:00
Devin Buhl 3c8568bc3c chore: update readme 2022-07-09 06:57:35 -04:00
Devin Buhl 6a758ee101 feat!: replace traefik with nginx ingress (#388) 
* feat: remove traefik crds

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in config sample env

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in configure

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in cluster-settings

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in configure

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change README.md to ingress-nginx

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove traefik helm release

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove traefik helm repo

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove error-pages

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove other traefik references

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add ingress-nginx helm repo

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add ingress-nginx helm release

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-07-07 09:51:41 -04:00
Devin Buhl 8091656c05 fix: actually deploy metallb 2022-06-19 12:55:34 -04:00
Devin Buhl ad529970c8 fix: there is no metallb system ns 2022-06-19 12:50:48 -04:00
Devin Buhl 2a3d7d6fa5 fix: secret is in core for cert manager 2022-06-19 12:48:17 -04:00
Devin Buhl 4969c53367 fix: remove namespace.yaml from cert-manager kustomization 2022-06-19 09:56:12 -04:00
Devin Buhl 7f375f1ad7 chore: add cert-manager renovate group 2022-06-19 08:27:52 -04:00
Devin Buhl 9fd26ad08d fix: traefik crds 2022-06-19 06:07:52 -04:00
Devin Buhl 84cbe4e596 fix: cluster issuers path 2022-06-18 16:24:17 -04:00
Devin Buhl 99aea49bdf fix: set external-dns interval back to 5m 2022-06-17 14:41:25 -04:00
Devin Buhl 0eb89d9eee fix(echo-server): use the correct tls options 2022-06-13 10:53:21 -04:00
Devin Buhl 8704ca93e1 fix(cluster): echo-server indentation 2022-06-11 21:06:31 -04:00
Devin Buhl 1db1872de1 fix: remove extra quotes around metallb traefik annotation 2022-06-11 17:04:11 -04:00
Devin Buhl 283ec2f52c fix: stakater-charts helm URL 2022-06-10 18:08:08 -04:00
Devin Buhl 57c32173e9 fix(configure): update sops encrypt to point to cluster/config 2022-06-10 12:46:25 -04:00
Devin Buhl e7d8409bd7 feat: use key_groups in sops configuration file 2022-06-08 09:01:01 -04:00
Devin Buhl 63e29a7257 feat(kube-vip)!: Use auto detection of kube-vip interface (#331) 
* Remove kube-vip interface config setting

* Remove kube-vip interface Ansible variable

* Remove kube-vip interface from cluster manifest

* Remove kube-vip interface from Ansible deployment

* Delete checks for consistent kube-vip interface names

* Remove checks task from Ansible role
 2022-05-22 23:15:51 -04:00
Devin Buhl 1fa16287e8 chore(README): Clean up provisioning tools section 2022-05-22 11:01:22 -04:00
Devin Buhl 3c276effd1 chore(README): mention arm64/amd64 nodes are supported 2022-05-22 10:56:12 -04:00
Devin Buhl 1363b755f4 fix: use github-deploy-key in gitignore 2022-05-16 18:20:11 -04:00
Devin Buhl 63d077e1dd feat(cluster): add error-pages (#207) 2022-05-13 14:03:25 -04:00
Devin Buhl 141f6ad107 fix: add cloudflare-only middleware to webhook ingress 2022-05-10 22:01:29 -04:00
Devin Buhl 08b05b0e31 chore: add another verification step 2022-05-07 05:02:16 -04:00
Devin Buhl 043c345373 chore: mention exception for var substitution 2022-05-06 11:37:17 -04:00
Devin Buhl cd8b55ec9a chore: change emoji symbol on nuke task 2022-05-06 11:33:08 -04:00
Devin Buhl d3806d3905 chore: add notes about the ansible:nuke task 2022-05-06 11:30:48 -04:00
Devin Buhl c4a3486c25 fix(ansible): delete ubuntu-upgrade playbook 2022-05-06 10:42:39 -04:00
Devin Buhl 9591c3feb6 fix(ansible): use full find ansible task cmd 2022-05-06 10:42:01 -04:00
Devin Buhl 65c8e27101 fix(cluster): set flux gitrepo default interval to 5m0s 2022-05-06 09:20:33 -04:00
Devin Buhl e7f9355747 fix: log a reason for possible ssh failure 2022-05-05 17:41:00 -04:00
Devin Buhl 2f7a222e84 fix(cluster): enable cloudflare proxy on github webhook 2022-05-03 12:15:32 -04:00
Devin Buhl ad110e3597 fix(ansible): add rbd module back in 
This was not working on raspi devices because without the linux-modules-extra-raspi package it would fail.
 2022-05-03 04:41:06 -04:00
Devin Buhl d10800e962 fix(ansible): add logic back to install pi specific package 2022-05-03 04:36:30 -04:00
Devin Buhl 13f47df96a fix(ansible): remove modprobe rbd from kernel task 
This will fail on raspberry pis and were not installing rookceph so it's not needed.
 2022-05-03 04:09:03 -04:00
Devin Buhl 375d41d313 fix(ansible): removed linux-modules-extra-raspi due to breakage 2022-05-01 08:13:45 -04:00
Devin Buhl ee82ff6bc5 chore: add note about enabling system upgrade controller 2022-04-30 11:28:20 -04:00
Devin Buhl faa3f03fbf chore: add note to readme on enabling renovatebot 2022-04-30 11:11:40 -04:00
Devin Buhl a0dcf7e242 chore: add note about SUC being opt-in 2022-04-28 17:41:11 -04:00
Devin Buhl f5710e3fd5 feat! make SUC opt-in 
SUC can cause issues when people are bootstrapping new clusters and there's a newer k3s version available. This can cause the cluster to fail or become unresponsive. This should be enabled with caution.

If you want to enable this, make sure you build your cluster with the latest k3s version set in the Ansible vars.
 2022-04-28 17:35:18 -04:00