Commit Graph
85 Commits
Author SHA1 Message Date
Devin Buhl 93c9d21581 feat: change jinja block/start delimiters for renovate support (#1163)
* feat: change jinja block/start delimiters for renovate support

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate config an helm repos

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-15 19:31:45 -05:00
Devin Buhl e6fbc6e128 feat: remove the need for raw jinja blocks (#1158)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-15 00:03:41 -05:00
Devin Buhl f9481d6202 feat: replace ansible templating with makejinja (#1156) 2024-01-14 23:03:02 -05:00
Devin Buhl a4731906d9 feat: set lstrip on ansible template task and remove comments (#1155)
* feat: set lstrip on ansible template task and remove comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: cert-manager block was neing stripped

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-14 17:08:59 -05:00
Harald Koch 15ffff895c chore: I found minor spelling errors (#1153) 2024-01-14 12:02:33 -05:00
Devin Buhl 5ee8a8a2fa fix: remove l2 announcement from k3s role config 2024-01-13 21:48:09 -05:00
Devin Buhl 77eb03d455 feat: do not apply cilium l2 config on cluster bootstrap
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-13 20:43:09 -05:00
Devin Buhl c9630bf4b5 fix: update cluster-rollout-update to be k0s compatible (#1149)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-13 20:01:22 -05:00
Devin Buhl e8772928e2 fix: update local path var in nuke playbook 2024-01-11 18:40:39 -05:00
Devin Buhl c8ebab7508 feat: do not template out k3s ansible when k0s is choosen
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-11 16:46:36 -05:00
d093d0a4e1 add k0s support (#1123)
* ignore idea

* Initial work on support for k0s

* *  Changed config param to bootstrap_distribution
*  Replaced democratic-csi with openebs
*  Added notes about system-upgrade-controller being ignored with k0s
*  Removed password for nodes

* *  Switched to single storage path for openebs
*  Removed democratic-csi helm repo
*  Added missing openebs helm repo
*  Fixed template formatting
*  Made bootstrap_private_github_repo hidden/undocumented
*  Updated flux cluster config to accommodate bootstrap_private_github_repo

* *  added the storageclass name to be declarative

* *  added newline
*  set chart wait false

* *  fixed spacing in K0sTasks
*  fixed openebs path
*  properly added openebs helm repo

* *  updated configure task to use venv
*  renamed bootstrap_kube_vip_addr to bootstrap_kubeapi_addr
*  renamed bootstrap_kube_vip_addr derived variables accordingly

* *  tweaked configure task cmd
*  started work on k0s-config.yaml template

* *  tweaked k0s task cmd
*  moved coredns under addons rather than optional
*  fixed typo in coredns task
*  normalized formatting in k0s-config
*  disabled telemetry in k0s-config
*  added renovate to k0s-config
*  removed tunnel and added routing mode in k0s-config cilium chart values
*  updated docs in config example
*  fixed issue with k0s-config controller role so it didn't default to worker+controller if more than one master

* *  fixed whitespace

* add k0sctl to brew tasks

* Update bootstrap/vars/config.sample.yaml

* Update bootstrap/vars/config.sample.yaml

* Update k0s-config.yaml.j2

* Update config.sample.yaml

* controllerManager and scheduler bind to `0.0.0.0` for metrics

* Update custom-cilium-helmchart.yaml.j2.j2

* Update helmvalues.yaml.j2

* Update bootstrap/tasks/addons/main.yaml

* first pass at readme updates

* update placement of k0sconfig options

* disable telemetry on k0sctl too

* disable k0s telemetry in env too

* update: jinja spacing in k0sconfig

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ensure bootstrap_local_storage_path is delete on nuke

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate regex for k3s/k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update nuke playbook and only include k3s task when k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update nuke playbook and only include k3s task when k3s and include jinja comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
Co-authored-by: Devin Buhl <devin@buhl.casa>
2024-01-11 15:03:36 -05:00
Devin Buhl f9a7307f76 feat: move installing prom operator crds to taskfile
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-06 09:22:43 -05:00
Devin Buhl 270f67ab8a fix: kube vip URL changed 2024-01-05 10:36:00 -05:00
Devin Buhl 1edb159559 feat: replace stale-containers systemd timer with kubelet-args
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-04 07:50:32 -05:00
Devin Buhl 5ed37745f3 fix: update nuke playbook to run tasks directly
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-04 07:44:24 -05:00
Devin Buhl ec8c19a24e feat!: for a single master node do not use etcd and add option to not use kube-vip
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-29 19:21:26 -05:00
renovate[bot] f0069a6b72 feat(helm): update chart coredns to 1.29.0 (#1102)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-28 09:03:42 -05:00
Devin Buhl 44da0c1022 feat!: replace rancher/local-path-provisioner with democratic-csi in local-hostpath mode
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-27 14:23:29 -05:00
renovate[bot] d44236adcd feat(github-release): update k3s-io/k3s to v1.29.0+k3s1 (#1098)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-21 20:24:06 -05:00
renovate[bot] 09d941d0e8 fix(helm): update chart cilium to 1.14.5 (#1090)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-21 19:43:03 -05:00
Devin Buhl a0bf578111 chore(ansible): clean up indentation 2023-12-21 12:00:49 -05:00
Devin Buhl bd2d784b0f fix(ansible): longhorn components are now a daemonset, no need to use the selector 2023-12-21 12:00:00 -05:00
Devin Buhl 429ef51c96 fix: missing name on cluster-rollout-update playbook 2023-12-11 17:57:30 -05:00
Devin Buhl ab7a99abbe feat: add bootstrap_cilium_loadbalancer_mode config option and default to dsr
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-11 16:07:57 -05:00
Devin Buhl a374c72887 fix: be a bit smarter when reloading kernel modules 2023-12-11 15:31:12 -05:00
Devin Buhl bf28fbaebf fix: instead of defining modules twice just restart the modules-load service 2023-12-11 15:14:17 -05:00
Devin Buhl 65bfe7a992 fix: ManageForeignRoutes is not needed anymore
https://github.com/cilium/cilium/pull/27208/
2023-12-11 14:56:28 -05:00
renovate[bot]andDevin Buhl 5d538a0433 feat(container)!: Update image kube-prometheus-stack to v55 (#1072)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2023-12-07 18:17:32 -05:00
renovate[bot] abd01476a5 fix(github-release): update k3s-io/k3s to v1.28.4+k3s2 (#1068)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-07 18:10:03 -05:00
renovate[bot] 4cffc74b53 fix(container): update image ghcr.io/kube-vip/kube-vip to v0.6.4 (#1066)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-07 18:09:14 -05:00
Devin Buhl 90eff07152 feat: enable secrets encryption on k3s
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-07 17:10:58 -05:00
Devin Buhl f5857bb15e feat: use official pause container because dockerhub sucks
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-07 17:05:23 -05:00
sp3nx0r ab174f87fd [bootstrap] feat: target cluster ansible plays only to kubernetes in case other hosts are used (#1065) 2023-12-07 09:51:08 -05:00
sp3nx0r 6be6e78427 [bootstrap] fix: remove conflicting condition for immutable flag and state:absent (#1064) 2023-12-07 09:49:43 -05:00
Devin Buhl e660fbaa1e fix: change attribute before deleting the file
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-12-03 17:20:00 -05:00
Devin Buhl b5ff534f06 fix: run kube-vip playbook one node at a time 2023-12-03 09:04:28 -05:00
renovate[bot] 8f28cab5ef fix(helm): update chart coredns to 1.28.2 (#1053)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-02 10:11:14 -05:00
Devin Buhl 14bba07cc5 chore: add ansible-lint 2023-11-29 10:15:53 -05:00
renovate[bot] c0b5b857a9 fix(github-release): update k3s-io/k3s to v1.28.3+k3s2 (#1040)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-24 14:41:28 -05:00
Devin Buhl fc3c7b56af revert: "feat(k3s): enable encryption at rest and stargz snapshotter"
stargz broken
2023-11-22 22:16:21 -05:00
Devin Buhl fdff319d4f feat(k3s): enable encryption at rest and stargz snapshotter 2023-11-22 20:15:04 -05:00
Devin Buhl 30cccac0ce fix: remove dupe when 2023-11-22 19:52:39 -05:00
Chad Zimmerman 30b4a88048 Update cluster-rollout-update.yaml.j2 (#1035) 2023-11-22 19:46:26 -05:00
Devin Buhl fde77c3f9e feat(ansible): remove search domain from /etc/resolv.conf
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-11-21 10:12:48 -05:00
renovate[bot] c4e0fa1063 fix(helm): update chart cilium to 1.14.4 (#1019)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-17 15:39:28 -05:00
Devin Buhl d0f4708027 fix: upgrade bootstrap prom crd versions 2023-11-12 10:25:34 -05:00
renovate[bot] 6d39a567bf fix(github-release): update k3s-io/k3s to v1.28.3+k3s1 (#1002)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-02 12:51:36 -04:00
renovate[bot] 96d9c69ebc feat(helm): update chart coredns to 1.28.1 (#1005)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-02 12:51:23 -04:00
bri a4642e6e52 fix: #990 don't disable apparmor unless it's installed (#991) 2023-10-24 19:51:15 -04:00
renovate[bot] ab9acc5c06 fix(helm): update chart cilium to 1.14.3 (#984)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-21 15:07:55 -04:00