Commit Graph
219 Commits
Author SHA1 Message Date
Wasurerarenai ca39a1cc53 fix(talos): Mount openebs-hostpath in kubelet (#1289) 2024-02-02 07:04:24 -05:00
Devin Buhl 89673cd17b feat: distribution is a dict and nodes and cluster are top level (#1288)
* feat: distribution is a dict and nodes and cluster are top level

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: housekeeping

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 20:31:42 -05:00
Devin Buhl cba35dc66a feat: add image-gc to k0s and talos kubelet options
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 17:01:30 -05:00
Devin Buhl 73bd9fabad feat: add image-gc to talos kubelet options
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 16:55:55 -05:00
Devin Buhl 80aa80c1ea feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry (#1284)
* feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix(k3s): add the mirrors for spegel

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ordering

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 09:39:53 -05:00
Wasurerarenai 0840b037ee fix(cloudflare): Update ingress-nginx-external-controller service name (#1285) 2024-02-01 08:25:54 -05:00
Devin Buhl ceeaba0ea0 feat: swap echo-server image to mendhak/http-https-echo
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:34:16 -05:00
Devin Buhl 90897f2d2e fix: update echo-server securityContext
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:22:41 -05:00
Devin Buhl e85cd4d644 fix: update SUC tolerations
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:19:54 -05:00
Devin Buhl 61d7806f18 fix: add security contexts to SUC
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:17:55 -05:00
Wasurerarenai 6cb24b86c1 feat: Talos network vlan tagging (#1282)
* feat: Add talos management vlan

* feat: talos vlan example in config.yaml
2024-02-01 06:51:06 -05:00
Devin Buhl 03125bf9c6 fix: use service monitor for cert manager 2024-01-31 20:40:25 -05:00
Devin Buhl c59d03c69e feat: enabled monitors everywhere and standardize resources a bit (#1281)
* feat: enabled monitors everywhere and standardize resources a bit

Signed-off-by: Devin Buhl <devin@buhl.casa>

* add raw tags

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-31 18:01:47 -05:00
renovate[bot]andDevin Buhl b24a55e790 feat(helm): update chart cilium to 1.15.0 (#1280)
* feat(helm): update chart cilium to 1.15.0

* Update cilium-values-full.partial.yaml.j2

* Update cilium-values-init.partial.yaml.j2

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2024-01-31 16:43:40 -05:00
renovate[bot] 817a5ea1c2 fix(helm): update chart reloader to 1.0.65 (#1279)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-31 15:19:17 -05:00
Devin Buhl 4159190a46 fix(k0s): only include workers in autopilot if there are any 2024-01-31 14:55:17 -05:00
Devin Buhl d6e80ea087 feat: update system-upgrade namespace and include support for k0s (#1278)
* fest: k0s Autopilot

* Create .mjfilter.py

* Create kustomization.yaml.j2

* Create ks.yaml.j2

* Create kustomization.yaml.j2

* Create updaterconfig.yaml.j2

* feat: update system-upgrade namespace and include support for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: rename talos app folder

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update k0s plan

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-31 14:45:24 -05:00
Devin Buhl a2ce911a18 fix(talos): do not render worker config when no workers
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 17:32:52 -05:00
Devin Buhl 1be8ceffa8 feat: update SUC dirs - drink coffee before trying to do a PR
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:23:30 -05:00
Devin Buhl 2267494b98 feat: add SUC for talos and k3s and move schematics to cluster.nodes.talos
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-30 09:10:46 -05:00
Wasurerarenai fa689379af feat: Support talhelper NodeConfig additions (#1273)
* feat: Example talhelper NodeConfig additions

* feat: Process talhelper NodeConfig additions
2024-01-30 07:53:59 -05:00
Devin Buhl 8ef31af331 feat: add first class support for private github repos (#1271)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 20:57:58 -05:00
Devin Buhl df642e5425 feat: update jinja delimiters back to default (#1269)
* feat: update jinja delimiters back to default

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove cert-manager promrules

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update talos csr approver

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 17:11:37 -05:00
Devin Buhl 5fa8b9685a fix: update k0s and k0s scripts
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-29 15:58:56 -05:00
Devin Buhl 889ca07692 feat: refactor config file (#1267)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-28 12:41:31 -05:00
renovate[bot] 6dbf89feab fix(helm): update chart ingress-nginx to 4.9.1 (#1265)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-27 06:53:34 -05:00
Devin Buhl 3b0fcb7ba5 feat: update network and cert-manager ns (#1263)
* feat: update network and cert-manager ns

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update sops var name to be consistent with env

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-26 18:48:35 -05:00
Devin Buhl 4ac206aef5 fix: remove local hostpath and cilium lb vars and update k0s (#1261)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-26 17:28:36 -05:00
renovate[bot] 1f3662e5c2 fix(container): update image docker.io/cloudflare/cloudflared to v2024.1.5 (#1254)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-26 15:45:13 -05:00
renovate[bot] 7c8f5319fd fix(container): update image ghcr.io/siderolabs/installer to v1.6.3 (#1255)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-26 15:45:04 -05:00
renovate[bot] a5545fdb89 feat(github-release): update k0sproject/k0s to v1.29.1+k0s.0 (#1258)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-26 15:44:56 -05:00
renovate[bot] ad7d25d61a fix(helm): update chart external-dns to 1.14.3 (#1257)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-26 15:44:39 -05:00
Devin Buhl 90ca5f026f fix: address talos comments (#1253)
* fix: update cni to cilium in taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: more updates

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: more cleanup

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: housekeeping

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-26 14:59:11 -05:00
Devin Buhl 7436eb43ce chore: update renovate config and annotations
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-25 18:39:54 -05:00
Devin Buhl e321b148a6 feat: removal of all addons (#1247)
* feat: removal of all addons

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update the mj script

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove the default namespace

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove descheduler and move reloader into flux-system

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-25 11:09:00 -05:00
Devin Buhl a5cb9b8d39 feat: implement SUC for talos (#1246)
* feat: implement SUC for talos

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: double ---

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update formatting

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: address PR comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-25 08:42:57 -05:00
Devin Buhl 35185f8aa2 fix: cluster user settings and secrets should be optional (#1245)
* fix: cluster user settings and secrets should be optional

* Delete bootstrap/templates/kubernetes/flux/vars/cluster-secrets-user.sops.yaml.j2

* Delete bootstrap/templates/kubernetes/flux/vars/cluster-settings-user.yaml.j2

* Update kustomization.yaml.j2

* Update storageclass.yaml.j2
2024-01-25 07:39:17 -05:00
Devin Buhl 5d849727d8 feat: implement mjfilter file for templates (#1244)
* feat: implement mjfilter file for templates

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use data.get in mjfilters

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-24 14:52:50 -05:00
Devin Buhl a16b347c54 feat: devcontainer properly hooks starship and direnv now
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-23 16:23:20 -05:00
renovate[bot] 04422ce50f fix(github-release): update k0sproject/k0s to v1.28.6+k0s.0 (#1237)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-23 07:56:31 -05:00
renovate[bot] 94449b8933 fix(helm): update chart cilium to 1.14.6 (#1232)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-22 16:04:05 -05:00
Devin Buhl afbf097dac feat: update kube-vip ansible playbook for k0s and k3s - ipv6 config changes (#1234)
* feat: update kube-vip ansible playbook for k0s and k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: move ipv6 to advanced options

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube-vip manifests to partials

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube vip samesies

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update config sample

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-22 15:28:21 -05:00
renovate[bot] 6557c255d6 fix(helm): update chart external-dns to 1.14.2 (#1233)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-22 12:47:12 -05:00
renovate[bot] 2bcef17368 fix(container): update image kube-prometheus-stack to v56.0.3 (#1231)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-22 12:47:05 -05:00
Devin Buhl 9373065338 feat: implement kube-vip for k0s & k3s in daemonset mode (#1230)
* feat: implement kube-vip for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: implement kube-vip for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: k3s to ds as well

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: no j2j2 nonsense

Signed-off-by: Devin Buhl <devin@buhl.casa>

* upadte: readme and taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: renovate config

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-22 12:45:11 -05:00
Devin Buhl d9c7fd44ba feat: Do not rely on k0s file uploads - instead use curl (#1229)
* feat: Do not rely on k0s file uploads - instead use curl

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add bootstrap_advanced_flags to validation

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only skip tests for non-static config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only skip tests for non-static config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: issues in k0s scripts

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: k0s config and remove ansible hook

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-22 10:14:49 -05:00
renovate[bot] 5ef0438529 fix(helm): update chart grafana to 7.2.4 (#1227)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-22 06:51:35 -05:00
renovate[bot] dc724fc4bc fix(container): update image kube-prometheus-stack to v56.0.2 (#1226)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-22 06:51:11 -05:00
Devin Buhl ba83e9a3c3 feat: add spegel to core components (#1225)
* feat: add spegel to core components

Signed-off-by: Devin Buhl <devin@buhl.casa>

* downgrade: csi-smb-driver

Signed-off-by: Devin Buhl <devin@buhl.casa>

* more: change to smb

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-21 19:24:38 -05:00
renovate[bot] 2cd7d1696b fix(container): update image ghcr.io/gethomepage/homepage to v0.8.6 (#1224)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-21 19:12:45 -05:00