infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,971 Commits 41 Branches 0 Tags
9f27386989bc5bd6cb15a805fbc09894c46b1cfb
Commit Graph
50 Commits
Author SHA1 Message Date
renovate[bot] 34cd3d2f99 fix(helm): update chart cilium to 1.15.3 (#1391) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-27 19:31:20 -04:00
Devin Buhl b275b781fd feat(talos): change from net.ifnames to a macaddr deviceSelector (#1376) 
* feat(talos): change from net.ifnames to a macaddr deviceSelector

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derpge

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: logic is easier to follow now questionmark

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: logic is easier to follow now questionmark

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-03-18 19:06:19 -04:00
renovate[bot] 1656c05156 fix(helm): update chart cilium to 1.15.2 (#1369) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-14 10:44:22 -04:00
Devin Buhl dff0eb75ac fix: keepHistory is false by default 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-03-06 08:26:49 -05:00
renovate[bot] 8162ff8916 feat(helm): update chart cilium to 1.15.1 (#1330) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:17 -05:00
Devin Buhl c17d543b21 refactor!: project updates (#1326) 
* refactor!: flux is required again

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: delimiter that chomps

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: bootstrap_cloudflare logic

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update tests

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove last quote

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-15 20:03:24 -05:00
Wouter BouvyandDevin Buhl 89559608b2 feat(talos): Add option to specify other gateway (#1316) 
* feat(talos): Add option to specify other gateway

* Renamed to default_gateway and add BGP config

* Update config.sample.yaml

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-02-13 15:04:56 -05:00
Wasurerarenai 381d3f1a5b fix(cilium): Correct L2 kustomization exclusion logic (#1314) 2024-02-13 01:34:03 -05:00
WasurerarenaiandDevin Buhl 2549e3698f feat(talos): Add cilium bgpControlPlane support and CNI security settings (#1296) 
* fix: Use cilium cni install values for Talos

* fix: Use cilium cni install values for Talos

* feat: Add cilium bgpControlPlane support for Talos

* feat: Add cilium bgpControlPlane support for Talos

* feat: Add LB cidr var for Talos BGPCP

* feat: Add jinja template for cilium-bgp.yaml

* Add cilium bgpControlPlane support for Talos

* feat: Add cilium bgpControlPlane example config for Talos

* fix: Remove invalid fields from bgp peering policy

* fix: Add serviceSelector to bgp peering policy

* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-02-08 08:27:40 -05:00
Devin Buhl df642e5425 feat: update jinja delimiters back to default (#1269) 
* feat: update jinja delimiters back to default

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove cert-manager promrules

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update talos csr approver

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-29 17:11:37 -05:00
Devin Buhl 889ca07692 feat: refactor config file (#1267) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-28 12:41:31 -05:00
renovate[bot] 94449b8933 fix(helm): update chart cilium to 1.14.6 (#1232) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-22 16:04:05 -05:00
Devin Buhl afbf097dac feat: update kube-vip ansible playbook for k0s and k3s - ipv6 config changes (#1234) 
* feat: update kube-vip ansible playbook for k0s and k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: move ipv6 to advanced options

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube-vip manifests to partials

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube vip samesies

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update config sample

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-22 15:28:21 -05:00
Devin Buhl e1330d734c feat: more changes to templating (#1218) 
* feat: clean up more jinja default references

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add additional tls sans force kube-vip on k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-21 11:39:12 -05:00
Devin Buhl 1ec59d1559 feat: add advanced features to config (#1208) 
* feat: add advanced features to config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only enable longhorn if distro is k3s or k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update ansible lint

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-20 12:27:20 -05:00
renovate[bot] 52aa4b5c89 fix(helm): update chart cilium to 1.14.6 (#1198) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-19 21:28:37 -05:00
Devin Buhl b8e09d5b52 fix: remove maxHistory from HelmReleases since the default is now 5 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-18 20:16:03 -05:00
Devin Buhl 0c4f0260d5 fix: ansible dir should only exist for k3s and k0s (#1191) 
* fix: ansible dir should only exist for k3s and k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: rename partial files

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-18 13:52:11 -05:00
Devin Buhl d46e7f9663 feat: add partial support, change k0s config filename, always use NLLB for k0s (#1180) 
* feat: add partial support, change k0s config filename, always use NLLB for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update wording

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-18 08:38:03 -05:00
Devin Buhl 13a005d23d feat: k3s use 127.0.0.1:6444 for Cilium k8sServiceHost:k8sServicePort 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-18 06:27:58 -05:00
Devin Buhl 646f335689 feat: change jinja variable start/end delimiters to avoid conflicts with go templating (#1168) 
* feat: change jinja variable start/end delimiters to avoid conflicts with go templating

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update comment in makejinja.toml

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update comment in makejinja.toml

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-16 09:25:12 -05:00
Devin Buhl 93c9d21581 feat: change jinja block/start delimiters for renovate support (#1163) 
* feat: change jinja block/start delimiters for renovate support

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate config an helm repos

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-15 19:31:45 -05:00
Devin Buhl e6fbc6e128 feat: remove the need for raw jinja blocks (#1158) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-15 00:03:41 -05:00
Devin Buhl f9481d6202 feat: replace ansible templating with makejinja (#1156) 2024-01-14 23:03:02 -05:00
Devin Buhl a4731906d9 feat: set lstrip on ansible template task and remove comments (#1155) 
* feat: set lstrip on ansible template task and remove comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: cert-manager block was neing stripped

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-14 17:08:59 -05:00
Jory Irving ee5de426a4 Replace Hajimari with Homepage (#1127) 
* feat: replace hajimari with homepage

* fix: add secret

* fix: homepage configmap kubernetes widget

Signed-off-by: Jory Irving <jory@jory.dev>

* feat: wrap annotations in blocks

* chore: homepage change ingress to internal

Signed-off-by: Jory Irving <jory@jory.dev>

---------

Signed-off-by: Jory Irving <jory@jory.dev>
 2024-01-11 15:05:24 -05:00
Benjamin RunnelsDevin BuhlDevin Buhl
 		d093d0a4e1 add k0s support (#1123) 
* ignore idea

* Initial work on support for k0s

* *  Changed config param to bootstrap_distribution
*  Replaced democratic-csi with openebs
*  Added notes about system-upgrade-controller being ignored with k0s
*  Removed password for nodes

* *  Switched to single storage path for openebs
*  Removed democratic-csi helm repo
*  Added missing openebs helm repo
*  Fixed template formatting
*  Made bootstrap_private_github_repo hidden/undocumented
*  Updated flux cluster config to accommodate bootstrap_private_github_repo

* *  added the storageclass name to be declarative

* *  added newline
*  set chart wait false

* *  fixed spacing in K0sTasks
*  fixed openebs path
*  properly added openebs helm repo

* *  updated configure task to use venv
*  renamed bootstrap_kube_vip_addr to bootstrap_kubeapi_addr
*  renamed bootstrap_kube_vip_addr derived variables accordingly

* *  tweaked configure task cmd
*  started work on k0s-config.yaml template

* *  tweaked k0s task cmd
*  moved coredns under addons rather than optional
*  fixed typo in coredns task
*  normalized formatting in k0s-config
*  disabled telemetry in k0s-config
*  added renovate to k0s-config
*  removed tunnel and added routing mode in k0s-config cilium chart values
*  updated docs in config example
*  fixed issue with k0s-config controller role so it didn't default to worker+controller if more than one master

* *  fixed whitespace

* add k0sctl to brew tasks

* Update bootstrap/vars/config.sample.yaml

* Update bootstrap/vars/config.sample.yaml

* Update k0s-config.yaml.j2

* Update config.sample.yaml

* controllerManager and scheduler bind to `0.0.0.0` for metrics

* Update custom-cilium-helmchart.yaml.j2.j2

* Update helmvalues.yaml.j2

* Update bootstrap/tasks/addons/main.yaml

* first pass at readme updates

* update placement of k0sconfig options

* disable telemetry on k0sctl too

* disable k0s telemetry in env too

* update: jinja spacing in k0sconfig

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ensure bootstrap_local_storage_path is delete on nuke

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate regex for k3s/k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update nuke playbook and only include k3s task when k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update nuke playbook and only include k3s task when k3s and include jinja comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
Co-authored-by: Devin Buhl <devin@buhl.casa>
 2024-01-11 15:03:36 -05:00
renovate[bot] 09d941d0e8 fix(helm): update chart cilium to 1.14.5 (#1090) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-21 19:43:03 -05:00
Devin Buhl 5ec15314f9 feat: update flux api versions for helmrelease 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-12 11:35:06 -05:00
Devin Buhl ab7a99abbe feat: add bootstrap_cilium_loadbalancer_mode config option and default to dsr 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-11 16:07:57 -05:00
Devin Buhl 84574b2f64 feat!: Update Flux ks names and add volsync and snapshot-controller (#1036) 2023-11-23 17:49:40 -05:00
renovate[bot] c4e0fa1063 fix(helm): update chart cilium to 1.14.4 (#1019) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-17 15:39:28 -05:00
renovate[bot] ab9acc5c06 fix(helm): update chart cilium to 1.14.3 (#984) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-21 15:07:55 -04:00
Devin Buhl d93e1f686e fix: there are not aliases in YAML multi-line strings 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-10-07 15:23:44 -04:00
Devin Buhl 587c465288 fix: name should be first in valuesFrom 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-10-07 15:12:38 -04:00
Devin Buhl 9abcf47a58 fix: break out kps and cilium helm values into separate configmap in order to make renovate happy 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-10-07 15:11:25 -04:00
renovate[bot]andDevin Buhl e15369c847 fix(helm): update chart cilium to 1.14.2 (#934) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-09-13 09:37:18 -04:00
Devin Buhl d0e9bf8f2d fix: update cilium kubeProxyReplacement helm value 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-09-03 09:37:31 -04:00
renovate[bot]andDevin Buhl e3f7762c23 fix(helm): update chart cilium to 1.14.1 (#903) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-08-30 08:03:00 -04:00
Devin Buhl b21d68a884 fix: add trustCRDsExist to cilium helmrelease 2023-08-15 12:14:05 -04:00
alex-matthews 11fef6ee67 update ingress classNames in HelmReleases (#883) 2023-08-03 16:10:45 -04:00
Devin Buhl 377bdb3d72 feat!: Separate out internal and external nginx controllers (#880) 2023-07-31 13:40:35 -04:00
renovate[bot]andDevin Buhl f9b1ddbd2c fix(helm): update chart cilium to 1.14.0 (#879) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-07-28 17:54:23 -04:00
Devin Buhl 195425bbe0 feat: Implement Grafana folders for existing dashboards and add new ones 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-23 20:59:20 -04:00
Devin Buhl 40b97fd841 fix: upgrade cilium helm version to 1.14.0-rc.1 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-18 07:30:30 -04:00
Devin Buhl 4dd5f9d5a8 feat: re-introduce flux vars for cluster network settings 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 20:52:12 -04:00
Skyler MäntysaariandDevin Buhl cac08d6368 fix(kubernetes-templating): IPv6 support for Flux managed Cilium and … (#857) 
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2023-07-17 17:56:37 -04:00
Devin Buhl 48b5ed75b4 feat: enable cilium grafana dashboards 2023-07-14 17:45:22 -04:00
Devin Buhl 700c248487 fix: safe guard coredns and cilium by setting prune to false 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-12 14:46:58 -04:00
Devin Buhl c9d988a66f feat!: template all ansible dir and rename template to bootstrap (#847) 2023-07-12 11:44:23 -04:00