Commit Graph
25 Commits
Author SHA1 Message Date
Devin Buhl 80aa80c1ea feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry (#1284)
* feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix(k3s): add the mirrors for spegel

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ordering

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 09:39:53 -05:00
Devin Buhl df642e5425 feat: update jinja delimiters back to default (#1269)
* feat: update jinja delimiters back to default

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove cert-manager promrules

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update talos csr approver

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 17:11:37 -05:00
Devin Buhl 889ca07692 feat: refactor config file (#1267)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-28 12:41:31 -05:00
Devin Buhl 90ca5f026f fix: address talos comments (#1253)
* fix: update cni to cilium in taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: more updates

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: more cleanup

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: housekeeping

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-26 14:59:11 -05:00
Devin Buhl 5d849727d8 feat: implement mjfilter file for templates (#1244)
* feat: implement mjfilter file for templates

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use data.get in mjfilters

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-24 14:52:50 -05:00
Devin Buhl afbf097dac feat: update kube-vip ansible playbook for k0s and k3s - ipv6 config changes (#1234)
* feat: update kube-vip ansible playbook for k0s and k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: move ipv6 to advanced options

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube-vip manifests to partials

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube vip samesies

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update config sample

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-22 15:28:21 -05:00
Devin Buhl 9373065338 feat: implement kube-vip for k0s & k3s in daemonset mode (#1230)
* feat: implement kube-vip for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: implement kube-vip for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: k3s to ds as well

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: no j2j2 nonsense

Signed-off-by: Devin Buhl <devin@buhl.casa>

* upadte: readme and taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: renovate config

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-22 12:45:11 -05:00
Devin Buhl e1330d734c feat: more changes to templating (#1218)
* feat: clean up more jinja default references

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add additional tls sans force kube-vip on k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-21 11:39:12 -05:00
Devin Buhl 1ec59d1559 feat: add advanced features to config (#1208)
* feat: add advanced features to config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only enable longhorn if distro is k3s or k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update ansible lint

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-20 12:27:20 -05:00
Devin Buhl eed4faa9e6 fix: keep included k3s coredns (#1197)
* Delete bootstrap/templates/kubernetes/apps/kube-system/coredns directory

* Update kustomization.yaml.j2

* Delete bootstrap/templates/ansible/playbooks/templates/custom-coredns-helmchart.yaml.j2.j2

* Update cluster-installation.yaml.j2

* Delete bootstrap/templates/ansible/playbooks/tasks/coredns.yaml.j2

* Update main.yaml.j2

* Update main.yaml.j2

* Update main.yaml.j2

* Update main.yaml.j2

* Update cluster-installation.yaml.j2
2024-01-19 06:13:39 -05:00
Devin Buhl b41ccc8145 fix: add tls sans options for k3s too (#1170)
* fix: add tls sans options for k3s too

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update comment

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-16 10:52:48 -05:00
Devin Buhl 93c9d21581 feat: change jinja block/start delimiters for renovate support (#1163)
* feat: change jinja block/start delimiters for renovate support

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate config an helm repos

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-15 19:31:45 -05:00
Devin Buhl e6fbc6e128 feat: remove the need for raw jinja blocks (#1158)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-15 00:03:41 -05:00
Devin Buhl f9481d6202 feat: replace ansible templating with makejinja (#1156) 2024-01-14 23:03:02 -05:00
Devin Buhl c8ebab7508 feat: do not template out k3s ansible when k0s is choosen
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-11 16:46:36 -05:00
d093d0a4e1 add k0s support (#1123)
* ignore idea

* Initial work on support for k0s

* *  Changed config param to bootstrap_distribution
*  Replaced democratic-csi with openebs
*  Added notes about system-upgrade-controller being ignored with k0s
*  Removed password for nodes

* *  Switched to single storage path for openebs
*  Removed democratic-csi helm repo
*  Added missing openebs helm repo
*  Fixed template formatting
*  Made bootstrap_private_github_repo hidden/undocumented
*  Updated flux cluster config to accommodate bootstrap_private_github_repo

* *  added the storageclass name to be declarative

* *  added newline
*  set chart wait false

* *  fixed spacing in K0sTasks
*  fixed openebs path
*  properly added openebs helm repo

* *  updated configure task to use venv
*  renamed bootstrap_kube_vip_addr to bootstrap_kubeapi_addr
*  renamed bootstrap_kube_vip_addr derived variables accordingly

* *  tweaked configure task cmd
*  started work on k0s-config.yaml template

* *  tweaked k0s task cmd
*  moved coredns under addons rather than optional
*  fixed typo in coredns task
*  normalized formatting in k0s-config
*  disabled telemetry in k0s-config
*  added renovate to k0s-config
*  removed tunnel and added routing mode in k0s-config cilium chart values
*  updated docs in config example
*  fixed issue with k0s-config controller role so it didn't default to worker+controller if more than one master

* *  fixed whitespace

* add k0sctl to brew tasks

* Update bootstrap/vars/config.sample.yaml

* Update bootstrap/vars/config.sample.yaml

* Update k0s-config.yaml.j2

* Update config.sample.yaml

* controllerManager and scheduler bind to `0.0.0.0` for metrics

* Update custom-cilium-helmchart.yaml.j2.j2

* Update helmvalues.yaml.j2

* Update bootstrap/tasks/addons/main.yaml

* first pass at readme updates

* update placement of k0sconfig options

* disable telemetry on k0sctl too

* disable k0s telemetry in env too

* update: jinja spacing in k0sconfig

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ensure bootstrap_local_storage_path is delete on nuke

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate regex for k3s/k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update nuke playbook and only include k3s task when k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update nuke playbook and only include k3s task when k3s and include jinja comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
Co-authored-by: Devin Buhl <devin@buhl.casa>
2024-01-11 15:03:36 -05:00
Devin Buhl 1edb159559 feat: replace stale-containers systemd timer with kubelet-args
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-04 07:50:32 -05:00
Devin Buhl 44da0c1022 feat!: replace rancher/local-path-provisioner with democratic-csi in local-hostpath mode
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-27 14:23:29 -05:00
Devin Buhl 90eff07152 feat: enable secrets encryption on k3s
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-07 17:10:58 -05:00
Devin Buhl f5857bb15e feat: use official pause container because dockerhub sucks
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-07 17:05:23 -05:00
Devin Buhl fc3c7b56af revert: "feat(k3s): enable encryption at rest and stargz snapshotter"
stargz broken
2023-11-22 22:16:21 -05:00
Devin Buhl fdff319d4f feat(k3s): enable encryption at rest and stargz snapshotter 2023-11-22 20:15:04 -05:00
Skyler Mäntysaari f90633ffe5 fix(ansible/ipv6): Cluster and Service CIDRs didin't get populated for v6 (#939) 2023-09-13 10:47:05 -04:00
Skyler MäntysaariandDevin Buhl 1d911f6821 feat: IPv6 support 🚀 (#855)
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2023-07-17 16:42:25 -04:00
Devin Buhl c9d988a66f feat!: template all ansible dir and rename template to bootstrap (#847) 2023-07-12 11:44:23 -04:00