Commit Graph
1852 Commits
Author SHA1 Message Date
renovate[bot] 91fdd72d27 fix(helm): update chart reloader to 1.0.67 (#1303)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-09 20:47:09 -05:00
renovate[bot] 4753316a8e chore(deps): update cloudflare to 2.18.1 (#1304)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-09 20:47:00 -05:00
renovate[bot] e99bc90a26 feat(container): update image docker.io/cloudflare/cloudflared to v2024.2.0 (#1305)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-09 20:46:46 -05:00
renovate[bot] b7631dac09 feat(helm): update chart metrics-server to 3.12.0 (#1306)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-09 20:46:37 -05:00
0cec2f9c29 fix(bootstrap): patch flux resource names to match oci manifests (#1299)
* fix(bootstrap): patch flux resource names to match oci manifests

Resource names differ in the installation manifests installed by the
install file found on the flux/fluxcd2 github repo and the oci artifact
oci://ghcr.io/fluxcd/flux-manifests. This commit introduces patches to
the bootstrap kustomization to rename the resources to match the
oci manifests.

* Update bootstrap/templates/kubernetes/bootstrap/kustomization.yaml.j2

---------

Co-authored-by: surskitt <surskitt@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2024-02-09 14:00:50 -05:00
Wouter Bouvy a97c56cc32 Fix Talos SUC ServiceAccount (#1298) 2024-02-09 09:07:50 -05:00
Petr Řehoř 98c1ca40e7 Add note about device selection in Cilium Helm Release (#1297)
See onedr0p/cluster-template#1295
2024-02-08 15:52:24 -05:00
Devin Buhl a19e7fa431 fix(devcontainer): install age with apk since age-keygen is missing 2024-02-08 10:44:47 -05:00
WasurerarenaiandDevin Buhl 2549e3698f feat(talos): Add cilium bgpControlPlane support and CNI security settings (#1296)
* fix: Use cilium cni install values for Talos

* fix: Use cilium cni install values for Talos

* feat: Add cilium bgpControlPlane support for Talos

* feat: Add cilium bgpControlPlane support for Talos

* feat: Add LB cidr var for Talos BGPCP

* feat: Add jinja template for cilium-bgp.yaml

* Add cilium bgpControlPlane support for Talos

* feat: Add cilium bgpControlPlane example config for Talos

* fix: Remove invalid fields from bgp peering policy

* fix: Add serviceSelector to bgp peering policy

* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2024-02-08 08:27:40 -05:00
Devin Buhl 81ffb39143 fix(talos): use the correct schematics var 2024-02-07 17:49:25 -05:00
Devin Buhl d49ce85e3a fix(talos): use correct var in taskfile 2024-02-04 09:57:53 -05:00
renovate[bot] 448e0fd390 fix(container): update image ghcr.io/siderolabs/installer to v1.6.4 (#1287)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-03 20:09:39 -05:00
renovate[bot] 55f5aa5f0c feat(helm): update chart cert-manager to v1.14.1 (#1293)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-02-03 18:06:43 -05:00
Devin Buhl 9f45079713 feat: rename ansible hosts groups to controllers and workers
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-03 18:03:11 -05:00
Devin Buhl 2c62c13905 fix: update flux taskfile to not check if installed
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-02 20:12:57 -05:00
Devin Buhl eab63476b7 feat(k0s): unsupport it (#1291)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-02 18:02:14 -05:00
Devin Buhl 3e0fb233b6 fix(k0s): update k0s config file 2024-02-02 12:12:43 -05:00
Devin Buhl acbb7e2bcb fix(k0s): nodeLocalLoadBalancing word 2024-02-02 08:17:11 -05:00
Wasurerarenai ca39a1cc53 fix(talos): Mount openebs-hostpath in kubelet (#1289) 2024-02-02 07:04:24 -05:00
Devin Buhl 6756f29ecb chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 20:42:03 -05:00
Devin Buhl acb86f2e35 fix: create flux-system namespace when using private GH repo
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 20:40:01 -05:00
Devin Buhl 89673cd17b feat: distribution is a dict and nodes and cluster are top level (#1288)
* feat: distribution is a dict and nodes and cluster are top level

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: housekeeping

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 20:31:42 -05:00
Devin Buhl cba35dc66a feat: add image-gc to k0s and talos kubelet options
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 17:01:30 -05:00
Devin Buhl 73bd9fabad feat: add image-gc to talos kubelet options
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 16:55:55 -05:00
Devin Buhl 7e8870ccf1 chore: housekeeping
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 16:30:59 -05:00
Devin Buhl 80aa80c1ea feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry (#1284)
* feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix(k3s): add the mirrors for spegel

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ordering

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 09:39:53 -05:00
Wasurerarenai 0840b037ee fix(cloudflare): Update ingress-nginx-external-controller service name (#1285) 2024-02-01 08:25:54 -05:00
RLe cf40220592 Update extensions.json: added Todo Tree (#1283)
- Function: Shows TODO, FIXME, etc. comment tags in a tree view
- Goal: to better manage and track of remaining work

https://marketplace.visualstudio.com/items?itemName=Gruntfuggly.todo-tree
2024-02-01 07:36:56 -05:00
Devin Buhl ceeaba0ea0 feat: swap echo-server image to mendhak/http-https-echo
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:34:16 -05:00
Devin Buhl 90897f2d2e fix: update echo-server securityContext
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:22:41 -05:00
Devin Buhl e85cd4d644 fix: update SUC tolerations
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:19:54 -05:00
Devin Buhl 61d7806f18 fix: add security contexts to SUC
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:17:55 -05:00
Wasurerarenai 6cb24b86c1 feat: Talos network vlan tagging (#1282)
* feat: Add talos management vlan

* feat: talos vlan example in config.yaml
2024-02-01 06:51:06 -05:00
Devin Buhl 03125bf9c6 fix: use service monitor for cert manager 2024-01-31 20:40:25 -05:00
Devin Buhl c59d03c69e feat: enabled monitors everywhere and standardize resources a bit (#1281)
* feat: enabled monitors everywhere and standardize resources a bit

Signed-off-by: Devin Buhl <devin@buhl.casa>

* add raw tags

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-31 18:01:47 -05:00
renovate[bot]andDevin Buhl b24a55e790 feat(helm): update chart cilium to 1.15.0 (#1280)
* feat(helm): update chart cilium to 1.15.0

* Update cilium-values-full.partial.yaml.j2

* Update cilium-values-init.partial.yaml.j2

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2024-01-31 16:43:40 -05:00
renovate[bot] 817a5ea1c2 fix(helm): update chart reloader to 1.0.65 (#1279)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-31 15:19:17 -05:00
Devin Buhl 4159190a46 fix(k0s): only include workers in autopilot if there are any 2024-01-31 14:55:17 -05:00
Devin Buhl d6e80ea087 feat: update system-upgrade namespace and include support for k0s (#1278)
* fest: k0s Autopilot

* Create .mjfilter.py

* Create kustomization.yaml.j2

* Create ks.yaml.j2

* Create kustomization.yaml.j2

* Create updaterconfig.yaml.j2

* feat: update system-upgrade namespace and include support for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: rename talos app folder

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update k0s plan

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-31 14:45:24 -05:00
renovate[bot] 0c688dfa29 chore(deps): update ansible to 9.2.0 (#1276)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-31 08:53:23 -05:00
renovate[bot] c19dd68759 feat(ansible): update ansible.utils to 3.1.0 (#1277)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-31 08:53:16 -05:00
Devin Buhl 4bf6489f25 chore: Update README.md 2024-01-31 07:07:59 -05:00
Devin Buhl 0021acc522 fix: talos customization multiline string and ansible raw/endraw (#1275)
* chore: update readme and workflows

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ansible templating

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: talos templating

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 21:22:33 -05:00
Devin Buhl a2ce911a18 fix(talos): do not render worker config when no workers
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 17:32:52 -05:00
Devin Buhl bc9f676c0f chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 15:25:56 -05:00
Devin Buhl 6798fd359d chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 15:10:26 -05:00
Devin Buhl ef563a4472 feat: add prevent downgrades check in k3s ansible
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 14:33:16 -05:00
Devin Buhl 19308f0783 chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:25:00 -05:00
Devin Buhl 1be8ceffa8 feat: update SUC dirs - drink coffee before trying to do a PR
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:23:30 -05:00
Devin Buhl e22a69f6f2 chore: add support for renovating SUC
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:18:50 -05:00