infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
2,192 Commits 41 Branches 0 Tags
b1bcc9695ff7bb055c77e59fee2d71e05e1718a7
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl b1bcc9695f fix(yaskfile): VERSION is not required anymore 2024-10-21 11:30:20 -04:00
Devin Buhl 0a59e4fdcc feat: improve talos upgrade and kubernetes upgrade tasks 2024-10-21 11:27:24 -04:00
Devin Buhl 13efcdbc7a feat: add apply-config to talos taskfile 2024-10-21 11:10:21 -04:00
Devin Buhl de1944ec73 fix: cp on macos is ancient 2024-10-20 10:21:35 -04:00
Devin Buhl 83d2235824 fix: update cp command in taskfile 2024-10-20 10:16:24 -04:00
Devin Buhl b7273c2aaf fix(yaskfile): lower case .taskfiles dirs (#1610) 2024-10-19 08:41:00 -04:00
Devin Buhl fa38c6d294 chore: I dropped a v 2024-10-18 15:23:09 -04:00
Devin Buhl 7570388c32 feat(yaskfile): updates and reorganizations (#1607) 2024-10-17 15:45:45 -04:00
Devin Buhl 7fb926cfc5 fix(yaskfile): TALOS_SCHEMATIC_ID 2024-10-15 11:21:30 -04:00
Devin Buhl 5e6887ecf8 chore: Update README.md 2024-10-11 07:42:07 -04:00
Devin Buhl 636d2fd840 feat: change talos upgrade task to support version instead of image (#1603) 
* feat: change talos upgrade task to support version instead of image

* Update README.md

* Update Taskfile.yaml

* Update Taskfile.yaml

* Update Taskfile.yaml

* Update Taskfile.yaml
 2024-10-11 07:35:08 -04:00
Devin Buhl dd16fcd64b chore: update taskfiles and direnv (#1601) 2024-10-09 17:53:15 -04:00
Devin Buhl be2819a84e chore: update config.yaml comments 2024-10-09 14:07:28 -04:00
Devin Buhl d1e92b5bc9 fix: taloscto not being installed with brew 2024-10-09 12:32:38 -04:00
Devin Buhl 8c29e80587 fix: remove default option on cert-manager chart 2024-10-07 08:08:15 -04:00
Devin Buhl 51afc1d7c3 fix: downgrade cert-manager until we know why the new version is failing 2024-10-07 08:07:49 -04:00
Devin Buhl 4453ff0fb2 fix: update spegel version with multiarch build 2024-09-28 09:41:35 -04:00
Devin Buhl 9fcabba314 fix: use sops filestatus for discovering non-encrypted sops files 
Fixes: https://github.com/onedr0p/cluster-template/issues/1539
 2024-09-27 14:31:19 -04:00
Devin Buhl 49b209b04d fix(spegel): use deedee-ops container for containerd v2 2024-09-25 12:23:08 -04:00
Devin Buhl a8070575d9 fix(talconfig): disable service discovery 2024-09-25 12:18:17 -04:00
Devin Buhl 2713eeeee8 fix: remove pinning cattrs in requirements 2024-09-11 14:08:16 -04:00
Devin Buhl a38d40a08f fix: add openssl to devcontainer 2024-09-03 07:24:54 -04:00
Devin Buhl 912f612dd1 fix: pin cattrs to 23.2.3 2024-08-31 08:26:13 -04:00
Devin Buhl 63f705a98f fix(openebs): helper pod use quay 2024-07-12 16:45:40 -04:00
Devin Buhl 30a56ad048 chore: pin flux-local to v5.3.1 2024-06-20 15:56:02 -04:00
Devin Buhl f397a7d09c feat: talos_patches makejinja func and move certain patches to patches directory (#1509) 2024-06-04 09:55:57 -04:00
Devin Buhl b1b2100283 feat(talos): enable hostDNS and resolveMemberNames 2024-06-03 14:15:03 -04:00
Devin Buhl 68287d31c4 chore: update readme 2024-05-27 09:36:14 -04:00
Devin Buhl dd7d48f678 chore: remove json schemas (#1488) 
* Update ks.yaml.j2

* Update kustomization.yaml.j2

* Update helmrelease.yaml.j2
 2024-05-21 21:29:50 -04:00
Devin Buhl 7dee32b940 fix: disable coredns in talconfig 2024-05-21 21:19:40 -04:00
Devin Buhl 584d23f3c8 chore: update e2e workflow 2024-05-21 19:48:00 -04:00
Devin Buhl 21afc0baa2 feat!: Remove support for k3s and go full-on Talos (#1482) 2024-05-21 08:29:59 -04:00
Devin Buhl 134d78ac49 Revert "feat(helm): update chart kubelet-csr-approver to 1.2.0 (#1476)" (#1478) 
This reverts commit 366eea27af.
 2024-05-17 13:08:21 -04:00
Devin Buhl b7f6d117f2 chore: add partials dir to renovate fileMatches 2024-05-16 16:44:52 -04:00
Devin Buhl 4b46e84f7f fix: example private ssh repo url 
Fixes: https://github.com/onedr0p/cluster-template/issues/1440
 2024-04-24 08:11:08 -04:00
Devin Buhl 94c51c148d feat(k8s-gateway): add watchedResources of service and ingress 2024-04-22 09:41:35 -04:00
Devin Buhl 58535fe81f chore: do not check for private dir in task repo clean 2024-04-11 11:05:52 -04:00
Devin Buhl 159c25a1b5 fix: include a default schematic id with no customizations included 2024-04-01 15:18:27 -04:00
Devin Buhl 73f6b80b13 fix(validation): cannot verify nodes in CI 2024-03-28 08:37:23 -04:00
Devin Buhl 5e0f5cbe58 chore: Update README.md 2024-03-27 18:05:33 -04:00
Devin Buhl ca6145f938 fix(openebs): disable ndm-operator 2024-03-27 14:44:02 -04:00
Devin Buhl d3a4b10641 Revert "Fix cilium to use k3s paths for binPath and confPath" (#1388) 2024-03-26 11:30:54 -04:00
Devin Buhl 49a77bec2a fix(talos): add deps to helmfile so that cilium installs first 2024-03-25 15:55:47 -04:00
Devin Buhl 62ea1d67fa chore: update talos apply taskfile description 2024-03-22 07:47:03 -04:00
Devin Buhl 9a3374c1b2 fix: kubeconfig should go to root dir 2024-03-21 20:43:51 -04:00
Devin Buhl b275b781fd feat(talos): change from net.ifnames to a macaddr deviceSelector (#1376) 
* feat(talos): change from net.ifnames to a macaddr deviceSelector

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derpge

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: logic is easier to follow now questionmark

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: logic is easier to follow now questionmark

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-03-18 19:06:19 -04:00
Devin Buhl 1164fbff8f add gettext to devcontainer 2024-03-16 19:55:56 -04:00
Devin Buhl 034b3f4a9c chore: update config example 2024-03-15 11:13:49 -04:00
Devin Buhl c8acfee483 fix: update renovate config 2024-03-14 10:39:55 -04:00
Devin Buhl e6f8f4dd33 fix(k3s): update args in k3s controllers plan 2024-03-02 14:30:24 -05:00
Devin Buhl 75265ab8db fix(workflow): update flux-local to only look at flux entrypoint 2024-02-29 22:34:52 -05:00
Devin Buhl 42dde98421 fix(renovate): add SUC group 2024-02-29 09:18:18 -05:00
Devin Buhl cdfb1d0176 fix: update kube-vip to v0.7.1 and set lb_enable to true 2024-02-26 16:15:48 -05:00
Devin Buhl 5a41f4ddaf fix(openebs): disable ndm 2024-02-26 07:24:23 -05:00
Devin Buhl b389bbe038 fix(talos): remove system-upgrade-controller (#1337) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-19 14:18:11 -05:00
Devin Buhl f2ebe285cd fix: add --skip-diff-on-install as well to helmfile apply args 2024-02-17 16:28:37 -05:00
Devin Buhl 8c155e552b fix: --suppress-diff with helmfile 2024-02-17 07:55:08 -05:00
Devin Buhl c17d543b21 refactor!: project updates (#1326) 
* refactor!: flux is required again

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: delimiter that chomps

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: bootstrap_cloudflare logic

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update tests

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove last quote

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-15 20:03:24 -05:00
Devin Buhl c3bf719cce chore: do not use cache when building devcontainer 2024-02-14 04:33:04 -05:00
Devin Buhl 7171793fab fix: comment out default gateway option 2024-02-13 15:08:00 -05:00
Devin Buhl 1b7ed1998d fix: kube-vip does no need svc lb enabled 2024-02-12 18:47:07 -05:00
Devin Buhl a19e7fa431 fix(devcontainer): install age with apk since age-keygen is missing 2024-02-08 10:44:47 -05:00
Devin Buhl 81ffb39143 fix(talos): use the correct schematics var 2024-02-07 17:49:25 -05:00
Devin Buhl d49ce85e3a fix(talos): use correct var in taskfile 2024-02-04 09:57:53 -05:00
Devin Buhl eab63476b7 feat(k0s): unsupport it (#1291) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-02 18:02:14 -05:00
Devin Buhl 3e0fb233b6 fix(k0s): update k0s config file 2024-02-02 12:12:43 -05:00
Devin Buhl acbb7e2bcb fix(k0s): nodeLocalLoadBalancing word 2024-02-02 08:17:11 -05:00
Devin Buhl 89673cd17b feat: distribution is a dict and nodes and cluster are top level (#1288) 
* feat: distribution is a dict and nodes and cluster are top level

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: housekeeping

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-01 20:31:42 -05:00
Devin Buhl 80aa80c1ea feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry (#1284) 
* feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix(k3s): add the mirrors for spegel

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ordering

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-01 09:39:53 -05:00
Devin Buhl 03125bf9c6 fix: use service monitor for cert manager 2024-01-31 20:40:25 -05:00
Devin Buhl c59d03c69e feat: enabled monitors everywhere and standardize resources a bit (#1281) 
* feat: enabled monitors everywhere and standardize resources a bit

Signed-off-by: Devin Buhl <devin@buhl.casa>

* add raw tags

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-31 18:01:47 -05:00
Devin Buhl 4159190a46 fix(k0s): only include workers in autopilot if there are any 2024-01-31 14:55:17 -05:00
Devin Buhl d6e80ea087 feat: update system-upgrade namespace and include support for k0s (#1278) 
* fest: k0s Autopilot

* Create .mjfilter.py

* Create kustomization.yaml.j2

* Create ks.yaml.j2

* Create kustomization.yaml.j2

* Create updaterconfig.yaml.j2

* feat: update system-upgrade namespace and include support for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: rename talos app folder

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update k0s plan

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-31 14:45:24 -05:00
Devin Buhl 4bf6489f25 chore: Update README.md 2024-01-31 07:07:59 -05:00
Devin Buhl 0021acc522 fix: talos customization multiline string and ansible raw/endraw (#1275) 
* chore: update readme and workflows

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ansible templating

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: talos templating

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-30 21:22:33 -05:00
Devin Buhl 8ef31af331 feat: add first class support for private github repos (#1271) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-29 20:57:58 -05:00
Devin Buhl 95bf353f7e feat: rename repo to cluster-template (#1270) 
* feat: rename repo to cluster-template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

* Update README.md

* Update README.md

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-29 17:34:53 -05:00
Devin Buhl df642e5425 feat: update jinja delimiters back to default (#1269) 
* feat: update jinja delimiters back to default

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove cert-manager promrules

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update talos csr approver

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-29 17:11:37 -05:00
Devin Buhl 889ca07692 feat: refactor config file (#1267) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-28 12:41:31 -05:00
Devin Buhl 7fc4250ef2 fix: update taskfiles and validation logic (#1264) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-26 20:34:04 -05:00
Devin Buhl 3b0fcb7ba5 feat: update network and cert-manager ns (#1263) 
* feat: update network and cert-manager ns

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update sops var name to be consistent with env

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-26 18:48:35 -05:00
Devin Buhl 4ac206aef5 fix: remove local hostpath and cilium lb vars and update k0s (#1261) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-26 17:28:36 -05:00
Devin Buhl 90ca5f026f fix: address talos comments (#1253) 
* fix: update cni to cilium in taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: more updates

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: more cleanup

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: housekeeping

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-26 14:59:11 -05:00
Devin Buhl 98583949f8 fix: these settings files were made optional 2024-01-26 06:10:02 -05:00
Devin Buhl e321b148a6 feat: removal of all addons (#1247) 
* feat: removal of all addons

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update the mj script

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove the default namespace

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove descheduler and move reloader into flux-system

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-25 11:09:00 -05:00
Devin Buhl a5cb9b8d39 feat: implement SUC for talos (#1246) 
* feat: implement SUC for talos

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: double ---

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update formatting

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: address PR comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-25 08:42:57 -05:00
Devin Buhl 35185f8aa2 fix: cluster user settings and secrets should be optional (#1245) 
* fix: cluster user settings and secrets should be optional

* Delete bootstrap/templates/kubernetes/flux/vars/cluster-secrets-user.sops.yaml.j2

* Delete bootstrap/templates/kubernetes/flux/vars/cluster-settings-user.yaml.j2

* Update kustomization.yaml.j2

* Update storageclass.yaml.j2
 2024-01-25 07:39:17 -05:00
Devin Buhl 5d849727d8 feat: implement mjfilter file for templates (#1244) 
* feat: implement mjfilter file for templates

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use data.get in mjfilters

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-24 14:52:50 -05:00
Devin Buhl 0eda6492fa feat: more improvements to devcontainer and arm64 (#1242) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-23 15:13:19 -05:00
Devin Buhl 7cdaaf59c9 feat: switch devcontainer to alpine 🚀 (#1241) 
* feat: switch devcontainer to alpine 🚀

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update talosctl arch

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: add serious comment

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: pkg names

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-23 12:19:26 -05:00
Devin Buhl 2206dbc519 feat: add devcontainer container on ghcr (#1240) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-23 10:31:10 -05:00
Devin Buhl 83118cfec3 chore: improvements to e2e workflow (#1235) 
* chore: improvements to e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: improve taskfiles

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update taskfiles

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-22 17:06:01 -05:00
Devin Buhl afbf097dac feat: update kube-vip ansible playbook for k0s and k3s - ipv6 config changes (#1234) 
* feat: update kube-vip ansible playbook for k0s and k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: move ipv6 to advanced options

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube-vip manifests to partials

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube vip samesies

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update config sample

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-22 15:28:21 -05:00
Devin Buhl 9373065338 feat: implement kube-vip for k0s & k3s in daemonset mode (#1230) 
* feat: implement kube-vip for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: implement kube-vip for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: k3s to ds as well

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: no j2j2 nonsense

Signed-off-by: Devin Buhl <devin@buhl.casa>

* upadte: readme and taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: renovate config

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-22 12:45:11 -05:00
Devin Buhl d9c7fd44ba feat: Do not rely on k0s file uploads - instead use curl (#1229) 
* feat: Do not rely on k0s file uploads - instead use curl

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add bootstrap_advanced_flags to validation

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only skip tests for non-static config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only skip tests for non-static config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: issues in k0s scripts

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: k0s config and remove ansible hook

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-22 10:14:49 -05:00
Devin Buhl ba83e9a3c3 feat: add spegel to core components (#1225) 
* feat: add spegel to core components

Signed-off-by: Devin Buhl <devin@buhl.casa>

* downgrade: csi-smb-driver

Signed-off-by: Devin Buhl <devin@buhl.casa>

* more: change to smb

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-21 19:24:38 -05:00
Devin Buhl 4dd36a7ca8 fix: update k0s spegel var 2024-01-21 17:53:58 -05:00
Devin Buhl 4be97f78e8 feat: update makejinja to 2.5.0 (#1221) 
* feat: update makejinja to 2.5.0 and implement mjfilter

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: move logic for skip tests

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: update makejinja to 2.5.0

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-21 17:37:48 -05:00
Devin Buhl 2aa9e15cf0 fix: add k0s node name back to tls sans 2024-01-21 12:55:17 -05:00
Devin Buhl e1330d734c feat: more changes to templating (#1218) 
* feat: clean up more jinja default references

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add additional tls sans force kube-vip on k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-21 11:39:12 -05:00