infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,911 Commits 41 Branches 0 Tags
c9c9e9cce76edd251d8cdb326856aaf8cfbe0bb0
Commit Graph
449 Commits
Author SHA1 Message Date
renovate[bot] c9c9e9cce7 fix(ansible): update kubernetes.core to 3.0.1 (#1359) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-10 14:16:21 -04:00
Devin Buhl dff0eb75ac fix: keepHistory is false by default 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-03-06 08:26:49 -05:00
Stephen BonnellandDevin Buhl d105410b6b feat!(kube-vip): Enable flux taking over kube-vip post-deployment. (#1357) 
* feat!(kube-vip): Enable flux taking over kube-vip post-deployment.

* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/app/kustomization.yaml.j2

* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/app/kustomization.yaml.j2

* Update daemonset.yaml.j2

* Update rbac.yaml.j2

* Update bootstrap/templates/kubernetes/apps/kube-system/kustomization.yaml.j2

* Update kustomization.yaml.j2

* Update kustomization.yaml.j2

* Create .mjfilter.py

* Update bootstrap/templates/ansible/playbooks/cluster-installation.yaml.j2

* Update bootstrap/templates/kubernetes/apps/kube-system/kube-vip/ks.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-06 08:19:51 -05:00
Jakub JędrzejczykandDevin Buhl d1b5fa1c98 Add the option for assigning a specific SSH key to a node. (#1356) 
* Add the option for specifying an SSH key.

* Add ability to specify SSH key.

* Update config.sample.yaml

* Update config.sample.yaml

* Update bootstrap/templates/ansible/inventory/hosts.yaml.j2

* Update bootstrap/templates/ansible/inventory/hosts.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-04 15:57:47 -05:00
Devin Buhl e6f8f4dd33 fix(k3s): update args in k3s controllers plan 2024-03-02 14:30:24 -05:00
renovate[bot] 0011fc924f fix(container): update system upgrade controller group to v0.13.4 (#1355) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-01 21:13:48 -05:00
renovate[bot] 1a97870ecc fix(container): update system upgrade controller group to v0.13.3 (patch) (#1352) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-29 09:40:36 -05:00
renovate[bot] 650f6cfc9f feat(helm): update chart ingress-nginx to 4.10.0 (#1351) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-29 09:16:39 -05:00
renovate[bot] 6fc5adebba feat(ansible): update community.general to 8.4.0 (#1348) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-28 17:49:28 -05:00
renovate[bot] 3f4d31916b chore(deps): update ansible to 9.3.0 (#1347) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-28 17:49:20 -05:00
Devin Buhl cdfb1d0176 fix: update kube-vip to v0.7.1 and set lb_enable to true 2024-02-26 16:15:48 -05:00
Devin Buhl 5a41f4ddaf fix(openebs): disable ndm 2024-02-26 07:24:23 -05:00
renovate[bot] 08676e183c fix(helm): update chart reloader to 1.0.69 (#1345) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-23 07:37:03 -05:00
renovate[bot] 3306457c63 fix(helm): update chart cert-manager to v1.14.3 (#1344) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-23 07:36:56 -05:00
renovate[bot] 7284472636 fix(container): update image ghcr.io/siderolabs/installer to v1.6.5 (#1342) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-23 07:36:44 -05:00
renovate[bot] 129432ae42 fix(container): update image docker.io/cloudflare/cloudflared to v2024.2.1 (#1341) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-23 07:36:33 -05:00
Petr Řehoř 0083f7b875 Fix cluster-kube-vip playbook (#1338) 2024-02-19 15:26:44 -05:00
Devin Buhl b389bbe038 fix(talos): remove system-upgrade-controller (#1337) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-19 14:18:11 -05:00
JJGadgets 8a6f98ae6c fix(cilium): disable BPF masquerade (#1334) 
* fix(cilium): disable BPF masquerade

It could cause issues/complications with more advanced networking configuration on the host (e.g. using FRR OpenFabric for host-level routing between nodes, or using other eBPF apps with Cilium). 

There's also no real advantage to using in homelab, so it should be safer to disable this.

* fix(cilium): disable BPF masquerade

It could cause issues/complications with more advanced networking configuration on the host (e.g. using FRR OpenFabric for host-level routing between nodes, or using other eBPF apps with Cilium).

There's also no real advantage to using in homelab, so it should be safer to disable this.
 2024-02-17 17:54:37 -05:00
renovate[bot] a73b54f014 feat(container): update image app-template to v2.6.0 (#1325) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:57 -05:00
renovate[bot] 8d320e5fec fix(container): update image ghcr.io/siderolabs/kubelet to v1.29.2 (#1327) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:49 -05:00
renovate[bot] e38e371719 fix(container): update image spegel to v0.0.18 (#1328) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:33 -05:00
renovate[bot] df33bd4836 fix(helm): update chart kubelet-csr-approver to 1.0.7 (#1329) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:26 -05:00
renovate[bot] 8162ff8916 feat(helm): update chart cilium to 1.15.1 (#1330) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 20:29:17 -05:00
Devin Buhl c17d543b21 refactor!: project updates (#1326) 
* refactor!: flux is required again

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: delimiter that chomps

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: bootstrap_cloudflare logic

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update tests

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove last quote

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-15 20:03:24 -05:00
renovate[bot] 8f2356db46 fix(helm): update chart cilium to 1.15.1 (#1323) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 14:41:06 -05:00
Wasurerarenai 025f5ddedf feat(talos): Allow users to include talhelper patches (#1320) 
* feat(talos): Allow users to include talhelper patches

* feat(talos): Add user talhelper patches to example config

* fix: Missing talos user_patches check on workers block
 2024-02-15 14:40:29 -05:00
Wasurerarenai 840506cea7 Allow users to optionally override templates (#1319) 
* Create overrides directory & readme.partial.yaml.j2

* Add bootstrap/overrides to makejinja.toml
 2024-02-14 15:00:05 -05:00
Wouter BouvyandDevin Buhl 89559608b2 feat(talos): Add option to specify other gateway (#1316) 
* feat(talos): Add option to specify other gateway

* Renamed to default_gateway and add BGP config

* Update config.sample.yaml

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-02-13 15:04:56 -05:00
Wasurerarenai 7eac552cd6 feat(talos): Add secureboot & tpm-based disk encryption support (#1315) 
* feat(talos): Add secureboot & tpm-based disk encryption support

* feat(talos): Add secureboot & tpm-based disk encryption example config
 2024-02-13 08:13:06 -05:00
Wasurerarenai 381d3f1a5b fix(cilium): Correct L2 kustomization exclusion logic (#1314) 2024-02-13 01:34:03 -05:00
Devin Buhl d2f2b85c6b fix(kube-vip): actually remove the option completely 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-12 18:55:47 -05:00
Devin Buhl 1b7ed1998d fix: kube-vip does no need svc lb enabled 2024-02-12 18:47:07 -05:00
Wouter Bouvy 6c637aa51f Adding kernel argument to disable predictable NIC naming. Fixes VIP (#1310) 
* Adding kernel argument to disable predictable NIC naming. Fixes VIP

* Simplified talconfig jinja template by using general patches option
 2024-02-11 17:54:55 -05:00
Wouter Bouvy 4a65ddeff9 Talos: remove deprecated System Extentions and move to schematicID (#1309) 
* Talos: remove deprecated System Extentions and move to schematicID for talhelper and SUC

* Fix typo in comments
 2024-02-10 17:02:32 -05:00
renovate[bot] 31323b4036 chore(deps): update ansible-lint to 24.2.0 (#1307) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:48:40 -05:00
renovate[bot] c0f26d4b28 fix(github-release): update flux group to v2.2.3 (#1300) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:48:09 -05:00
renovate[bot] cb0049b918 fix(github-release): update k3s-io/k3s to v1.29.1+k3s2 (#1301) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:47:36 -05:00
renovate[bot] 4590ab842f fix(helm): update chart cert-manager to v1.14.2 (#1302) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:47:19 -05:00
renovate[bot] 91fdd72d27 fix(helm): update chart reloader to 1.0.67 (#1303) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:47:09 -05:00
renovate[bot] e99bc90a26 feat(container): update image docker.io/cloudflare/cloudflared to v2024.2.0 (#1305) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:46:46 -05:00
renovate[bot] b7631dac09 feat(helm): update chart metrics-server to 3.12.0 (#1306) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:46:37 -05:00
surskittsurskittDevin Buhl
 		0cec2f9c29 fix(bootstrap): patch flux resource names to match oci manifests (#1299) 
* fix(bootstrap): patch flux resource names to match oci manifests

Resource names differ in the installation manifests installed by the
install file found on the flux/fluxcd2 github repo and the oci artifact
oci://ghcr.io/fluxcd/flux-manifests. This commit introduces patches to
the bootstrap kustomization to rename the resources to match the
oci manifests.

* Update bootstrap/templates/kubernetes/bootstrap/kustomization.yaml.j2

---------

Co-authored-by: surskitt <surskitt@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-02-09 14:00:50 -05:00
Wouter Bouvy a97c56cc32 Fix Talos SUC ServiceAccount (#1298) 2024-02-09 09:07:50 -05:00
Petr Řehoř 98c1ca40e7 Add note about device selection in Cilium Helm Release (#1297) 
See onedr0p/cluster-template#1295
 2024-02-08 15:52:24 -05:00
WasurerarenaiandDevin Buhl 2549e3698f feat(talos): Add cilium bgpControlPlane support and CNI security settings (#1296) 
* fix: Use cilium cni install values for Talos

* fix: Use cilium cni install values for Talos

* feat: Add cilium bgpControlPlane support for Talos

* feat: Add cilium bgpControlPlane support for Talos

* feat: Add LB cidr var for Talos BGPCP

* feat: Add jinja template for cilium-bgp.yaml

* Add cilium bgpControlPlane support for Talos

* feat: Add cilium bgpControlPlane example config for Talos

* fix: Remove invalid fields from bgp peering policy

* fix: Add serviceSelector to bgp peering policy

* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-full.partial.yaml.j2

* Update bootstrap/templates/partials/cilium-values-init.partial.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-02-08 08:27:40 -05:00
Devin Buhl 81ffb39143 fix(talos): use the correct schematics var 2024-02-07 17:49:25 -05:00
renovate[bot] 448e0fd390 fix(container): update image ghcr.io/siderolabs/installer to v1.6.4 (#1287) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-03 20:09:39 -05:00
renovate[bot] 55f5aa5f0c feat(helm): update chart cert-manager to v1.14.1 (#1293) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-03 18:06:43 -05:00
Devin Buhl 9f45079713 feat: rename ansible hosts groups to controllers and workers 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-03 18:03:11 -05:00