Commit Graph
1437 Commits
Author SHA1 Message Date
Devin Buhl 14e03b23f0 fix: fiddle with cilium l2announcement values
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-11 14:58:04 -04:00
Arthur Zapparoli 0fcff061db Move certificate switch in README after DNS (#844) 2023-07-11 14:44:05 -04:00
Devin Buhl 26457b89ed fix: include localRedirectPolicy in cilium helmrelease
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-11 13:37:29 -04:00
Devin Buhl d3c547a20d fix: set replicas to 1 on cilium operator
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-11 13:23:22 -04:00
Arthur Zapparoli eb9c00bc8a Fix cp command on OSX (#843)
The `--no-clobber` option is non-POSIX, but GNU-specific. `-n` should do the same in Linux and OSX.
2023-07-11 09:58:41 -04:00
Devin Buhl 4fbcba348f fix(ansible): in the case of cluster-installation playbook failure still clean up helmchart resources on next run
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-10 13:33:20 -04:00
Devin Buhl 73f53d2fca chore: update sample vars comments
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-10 13:28:17 -04:00
Devin Buhl 4a0facce65 chore: use pull_request_target on labeler 2023-07-08 19:54:53 -04:00
Jory Irving e2236a4663 feat(kubernetes-dashboard): Upgrade chart to 7.0.2 (#841)
* feat: upgrade chart

* fix: remove cert, due to using wildcart
2023-07-08 19:43:43 -04:00
Devin Buhl 965a294943 fix: Cilium l2announcements lease config
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-07 09:15:16 -04:00
Devin Buhl ff5e52559b fix: set coredns label override and service name
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 18:06:48 -04:00
Devin Buhl 2b5c1b1c98 chore: update taskfile to have guidance on next steps after init
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 17:00:44 -04:00
Devin Buhl 0d17e11709 feat!: change some task names for better user experiance
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 16:29:17 -04:00
Devin Buhl dfee1cbb97 chore: update readme - note about additional addons
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 15:39:22 -04:00
Devin Buhl abc082fafb chore: update readme - instructions for addons
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 15:11:46 -04:00
Devin Buhl 0b4f32bd7a feat: add csi-driver-nfs addon (#837) 2023-07-06 15:02:23 -04:00
Devin Buhl 34527bd3e2 feat(ansible): Add addon support (#836) 2023-07-06 14:21:32 -04:00
Devin Buhl 8af4377aa3 chore: update readme
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 10:58:59 -04:00
Devin Buhl 14d72ae55a fix(ansible): use localhost when getting repository path for kubeconfig
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 09:08:50 -04:00
renovate[bot] ddbb9b1f48 fix(github-release): update flux group to v2.0.0 (patch) (#834)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-06 09:04:49 -04:00
Devin Buhl e191ff3ce7 chore: kustomize is a renovate manager
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 09:04:00 -04:00
Devin Buhl f55995e14c chore: simplify renovate config filematch
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 09:01:12 -04:00
Devin Buhl d7d595da75 chore: update renovate config
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 08:53:25 -04:00
Devin Buhl 183c827136 fix: update gha config, renovate and README.md
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-06 08:43:38 -04:00
Devin Buhl fe41cf6ea5 feat: move kubernetes dir into templates to support jinja2 across all files (#831) 2023-07-05 21:17:10 -04:00
Devin Buhl 7b0a154fed fix(ansible): keep apparmor installed but mask the service
Also add task back in for updating `/etc/hosts` since hostname doesn't change this file
2023-07-05 18:49:18 -04:00
Jory IrvingandDevin Buhl ff031182d6 chore: initial RPi considerations (#832)
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2023-07-05 12:36:40 -04:00
Devin Buhl 0df7ec6526 feat!: debian 12 to the moon (#830) 2023-07-05 10:36:05 -04:00
Devin Buhl b714540000 fix: coredns is part of the docker oss program and not rate limited
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-05 08:27:28 -04:00
Devin Buhl a855b3024d fix: set rounds to 10 on weave password
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-05 08:21:17 -04:00
Devin Buhl 73bed06eba fix: use http2 for cloudflared 2023-07-05 03:59:42 -04:00
Devin Buhl 39643241f9 chore: use cmd in root taskfile 2023-07-04 20:21:11 -04:00
Devin Buhl 2f4b59c8aa fix: do not reboot twice when using taskfile to nuke 2023-07-04 20:01:39 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin Buhl fd1590efcc fix: actually deploy custom-cilium-l2.yaml.j2
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-04 18:00:15 -04:00
Jory Irving 913f0c036a fix key to be weave expects (#828) 2023-07-04 17:40:15 -04:00
Devin Buhl 9cd26e9d11 feat: manage the cilium l2 config with flux (#827)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-04 17:01:36 -04:00
Devin Buhl b0b54b31b0 fix: use fqcrdname for resource readiness
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-04 15:57:13 -04:00
Devin Buhl dbf7d878e9 fix: check for the existence of cloudflared
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-04 15:40:06 -04:00
Devin Buhl c95911eed4 fix: use shell instead of command when checking for CLI tools
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-04 15:37:37 -04:00
Devin Buhl 315659d196 chore: update requirements and stale container service
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-04 15:24:31 -04:00
Aumer 06c4405fa2 fix: Update hosts.yaml destination (#826)
```[WARNING]: Unable to parse /home/Rodent/home-ops/ansible/inventory/hosts.yaml as an inventory source
ERROR! No inventory was parsed, please check your configuration and options.
task: Failed to run task "ansible:list": exit status 1```
2023-07-04 14:56:59 -04:00
Jory Irving 3d014fa327 fix: add helm repo for coredns (#825) 2023-07-04 12:42:51 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822)
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
2023-07-04 11:36:58 -04:00
AumerandDevin Buhl 26164c7278 fix: Add hubble-ui hajimari icon (#823)
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2023-07-04 09:35:18 -04:00
Devin Buhl 467af18b0f feat!: Drop Metallb in favor of Cilium L2Announcements (#821) 2023-07-03 14:47:51 -04:00
Devin Buhl 4905990750 fix(ansible): forgot to rename this file 2023-07-03 13:11:29 -04:00
Devin Buhl 46d68b8d95 feat(ansible): Deploy coredns with HelmChart instead of builtin method and other small QoL changes
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-03 11:30:13 -04:00
renovate[bot] df96293874 fix(ansible): update community.sops to 1.6.4 (#811)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-03 07:58:16 -04:00
renovate[bot] 2053913767 fix(github-release): update k3s-io/k3s to v1.27.3+k3s1 (#812)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-07-03 07:58:10 -04:00