infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,454 Commits 41 Branches 0 Tags
d0da98d2169c57e16cd1cf90391871178356a394
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl d0f4708027 fix: upgrade bootstrap prom crd versions 2023-11-12 10:25:34 -05:00
Devin Buhl ab25928398 fix: add back spec.[install|upgrade].crds: CreateReplace to kps helm release 2023-11-12 10:20:57 -05:00
Devin Buhl 3f4bbb8405 fix: use git source for k3s galaxy role 2023-11-04 10:48:45 -04:00
Devin Buhl ddb3915a07 fix: remove secret on k8s dashboard ingress 2023-10-07 17:53:01 -04:00
Devin Buhl abcd85a5b9 fix: remove default main.yaml 2023-09-19 12:07:09 +08:00
Devin Buhl 352ac7060b fix: enable post quantum in cloudflared 2023-09-02 16:33:49 -04:00
Devin Buhl 760f15439e fix: enable k8s api load balancing over ipvs in kube-vip 2023-08-30 08:01:45 -04:00
Devin Buhl b21d68a884 fix: add trustCRDsExist to cilium helmrelease 2023-08-15 12:14:05 -04:00
Devin Buhl adda5de03f chore: update renovate regexes 2023-08-13 13:11:15 -04:00
Devin Buhl d292d701ee chore: update readme 2023-08-08 08:44:02 -04:00
Devin Buhl 9a5f117518 chore: run apt update before installing sudo 2023-08-06 18:23:45 -04:00
Devin Buhl ff8eb5652f fix: change external ingress to NOT be default 2023-08-05 09:58:03 -04:00
Devin Buhl 377bdb3d72 feat!: Separate out internal and external nginx controllers (#880) 2023-07-31 13:40:35 -04:00
Devin Buhl 639fc37328 chore: remove accidental yaml schema comment 2023-07-29 06:53:09 -04:00
Devin Buhl 3c6f701b6a fix: update SUC kustomization due to kustomize build warnings 2023-07-29 06:51:46 -04:00
Devin Buhl 3813133196 chore: add mikestead.dotenv to vscode extensions 2023-07-26 18:00:05 -04:00
Devin Buhl 1a616bcff2 chore: add sops age key setting in vscode settings 2023-07-24 16:03:34 -04:00
Devin Buhl f3c019fcb1 fix: system-upgrade-controller renovate comment 2023-07-21 19:58:49 -04:00
Devin Buhl eae6d990ae chore: update renovate config 2023-07-21 19:56:32 -04:00
Devin Buhl e64793f367 chore: task certificatereq is part of certificates task 2023-07-20 15:43:07 -04:00
Devin Buhl e6cae4e699 fix(grafana): add ingress-nginx dashboard & update datasources 2023-07-20 11:31:41 -04:00
Devin Buhl 571a7454c0 refactor: install ansible with Python venv (#863) 2023-07-19 11:03:59 -04:00
Devin Buhl c48083ca6b fix: cloudflared brew package 2023-07-19 07:32:10 -04:00
Devin Buhl 3610c39a31 chore: phoneops readme changes 2023-07-18 23:09:34 -04:00
Devin Buhl f33054d57f chore: readme sops age key env is in direnv 2023-07-17 06:43:05 -04:00
Devin Buhl 253f033778 chore: readme refactoring (#850) 2023-07-16 13:25:58 -04:00
Devin Buhl 6dec8a4857 chore: mention ssh agent example in resent 2023-07-15 21:23:28 -04:00
Devin Buhl 40902d60ff fix: jinja2 comments needed for suc 2023-07-15 15:35:04 -04:00
Devin Buhl 48b5ed75b4 feat: enable cilium grafana dashboards 2023-07-14 17:45:22 -04:00
Devin Buhl c9d988a66f feat!: template all ansible dir and rename template to bootstrap (#847) 2023-07-12 11:44:23 -04:00
Devin Buhl 4a0facce65 chore: use pull_request_target on labeler 2023-07-08 19:54:53 -04:00
Devin Buhl 0b4f32bd7a feat: add csi-driver-nfs addon (#837) 2023-07-06 15:02:23 -04:00
Devin Buhl 34527bd3e2 feat(ansible): Add addon support (#836) 2023-07-06 14:21:32 -04:00
Devin Buhl fe41cf6ea5 feat: move kubernetes dir into templates to support jinja2 across all files (#831) 2023-07-05 21:17:10 -04:00
Devin Buhl 7b0a154fed fix(ansible): keep apparmor installed but mask the service 
Also add task back in for updating `/etc/hosts` since hostname doesn't change this file
 2023-07-05 18:49:18 -04:00
Devin Buhl 0df7ec6526 feat!: debian 12 to the moon (#830) 2023-07-05 10:36:05 -04:00
Devin Buhl 73bed06eba fix: use http2 for cloudflared 2023-07-05 03:59:42 -04:00
Devin Buhl 39643241f9 chore: use cmd in root taskfile 2023-07-04 20:21:11 -04:00
Devin Buhl 2f4b59c8aa fix: do not reboot twice when using taskfile to nuke 2023-07-04 20:01:39 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin Buhl 9cd26e9d11 feat: manage the cilium l2 config with flux (#827) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 17:01:36 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822) 
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
 2023-07-04 11:36:58 -04:00
Devin Buhl 467af18b0f feat!: Drop Metallb in favor of Cilium L2Announcements (#821) 2023-07-03 14:47:51 -04:00
Devin Buhl 4905990750 fix(ansible): forgot to rename this file 2023-07-03 13:11:29 -04:00
Devin Buhl 3dcec5faaa feat(ansible): Add stale container weekly systemd timer 2023-07-01 11:18:25 -04:00
Devin Buhl 8d67a5988b fix: do not manage Foreign Routes or Foreign Routing Rules 2023-07-01 08:09:02 -04:00
Devin Buhl 635113c9f6 feat: remove pre-commit from template (#810) 2023-06-30 09:09:53 -04:00
Devin Buhl 5a531b1d15 fix: set grafana deploymentStrategy to Recreate 2023-06-29 18:03:53 -04:00
Devin Buhl 260aefc5d0 chore: Update README.md 2023-06-29 12:40:17 -04:00
Devin Buhl b1049ee1bf Revert "fix(helm): update chart cilium to 1.13.4 (#795)" (#798) 
This reverts commit 593549ad35.
 2023-06-17 06:57:01 -04:00
Devin Buhl 4f04accc30 fix: update k3s Ansible role to v3.4.2 2023-06-17 06:55:05 -04:00
Devin Buhl 3116a10429 fix: k3s not cleaning up the cilium helmchart 2023-06-12 19:36:36 -04:00
Devin Buhl b539157979 fix: use wait: true on cilium helmchart removal 2023-06-11 20:34:12 -04:00
Devin Buhl 859b8c27b2 fix: use admin username on weave dashboard 2023-06-09 10:14:48 -04:00
Devin Buhl eb311c0a53 fix: update reloader secret on weave gitops 2023-06-08 09:56:59 -04:00
Devin Buhl 4ae51b0db8 feat: Remove Fedora server as supported OS (#774) 2023-06-05 11:15:34 -04:00
Devin Buhl c11092b261 fix: proper of wait and dependsOn in flux ks and hr (#771) 2023-06-04 09:07:50 -04:00
Devin Buhl ab1af57f79 chore: update readme 2023-06-03 10:02:02 -04:00
Devin Buhl 3743149bac chore: rework cluster:reconcile task 2023-06-01 16:06:09 -04:00
Devin Buhl dfa7a1adea fix: add legacy master role to toleration too 2023-06-01 11:19:21 -04:00
Devin Buhl 62e560e565 fix: add tolerations on server plan 2023-06-01 11:16:29 -04:00
Devin Buhl 87f2f9cc6d chore: force flux versioning to semver 2023-06-01 09:16:44 -04:00
Devin Buhl 105cf542d0 fix: use temp ansible galaxy branch to ensure kube-vip is installed on all controllers 2023-05-31 21:43:02 -04:00
Devin Buhl 6db540671a fix: do not use serviceAccountName in kube-vip static pod 2023-05-31 12:03:18 -04:00
Devin Buhl d5107d6b90 feat: Add grafana and kube-prometheus-stack HelmReleases (#758) 2023-05-31 10:16:30 -04:00
Devin Buhl 3c0f5554a9 fix: speed up nuke playbook by preventing k3s from starting on next reboot 2023-05-30 17:19:58 -04:00
Devin Buhl efc1fc0bb0 chore: update readme 2023-05-29 15:25:03 -04:00
Devin Buhl d8aea6de29 feat: allow flux to take over cilium (#755) 2023-05-29 09:38:06 -04:00
Devin Buhl 5b9468dcd2 fix: use raw URL for gitlab dashboard 2023-05-28 12:41:11 -04:00
Devin Buhl 2899466303 feat!: replace calico with cilium (#740) 2023-05-28 11:23:09 -04:00
Devin Buhl edb3b21310 fix: ansible error when trying to delete files 2023-05-27 17:34:31 -04:00
Devin Buhl 10ed9fbacb fix(ansible): bump calico version to 3.25.1 2023-05-10 13:23:27 -04:00
Devin Buhl e91cacd4e2 chore: remove terraform references from README 2023-05-10 13:15:47 -04:00
Devin Buhl ffa3eceb30 Swap deps on external-dns and cloudflared (#725) 
* Swap deps on external-dns and cloudflared

* Update ks.yaml
 2023-05-09 21:46:46 -04:00
Devin Buhl 4e4c03f7be chore: update internal dns section in readme 2023-05-07 17:43:18 -04:00
Devin Buhl f4d7a4fe49 chore: hopefully more clear on internal dns in readme 2023-05-07 16:41:35 -04:00
Devin Buhl d8e23540f2 chore: readme grammar and spelling 2023-05-07 16:28:53 -04:00
Devin Buhl a757b553cb chore: clear up main readme section 2023-05-07 16:27:49 -04:00
Devin Buhl abcb8b53a4 chore: more greater internal dns README 2023-05-06 14:23:29 -04:00
Devin Buhl f0cb9692a4 chore: update readme with clearer internal dns explanations 2023-05-06 14:21:12 -04:00
Devin Buhl efd558e022 fix: add cloudflared to kustomization.yaml 2023-05-06 12:07:31 -04:00
Devin Buhl 96d3c7841c fix: add back in templating out external-dns secret 2023-05-06 07:49:30 -04:00
Devin Buhl 48a3e5f80e fix: SECRET_DOMAIN spelling 2023-05-05 12:29:22 -04:00
Devin Buhl 08c032ac58 fix: update the secret type to stringData 2023-05-05 11:39:50 -04:00
Devin Buhl 3449ccda40 fix: use proper helm repo name for bjw-s charts 2023-05-05 11:39:24 -04:00
Devin Buhl 65f6e80086 chore: fix typo in readme 2023-05-04 19:41:55 -04:00
Devin Buhl b917eccb76 Revert "feat(github-release): update k3s-io/k3s to v1.27.1+k3s1 (#710)" (#715) 
This reverts commit 1080234b8a.
 2023-05-01 20:23:15 -04:00
Devin Buhl 9043eddd45 fix: set containerIPForwarding to Enabled in Calico config 2023-04-29 14:45:54 -04:00
Devin Buhl 432d281287 fix: automerge containers pinned to a digest 2023-04-29 14:16:10 -04:00
Devin Buhl d025b91352 fix: Update bootstrap kustomization and include note in file 2023-04-13 09:24:02 -04:00
Devin Buhl 278e55b10a feat: Enable drift detection and oom watcher for helm controller 2023-04-13 09:17:31 -04:00
Devin Buhl 79968169bc fix: actually set the correct flux version in bootstrap 2023-04-09 20:41:22 -04:00
Devin Buhl 70c1799d76 feat!: Upgrade Flux to v2.0.0-rc.1 and update apiVersions (#693) 2023-04-08 13:41:58 -04:00
Devin Buhl 7c2ebedc98 chore: be clear about not using Ubuntu server minimal 2023-04-02 10:54:44 -04:00
Devin Buhl 07decda9b4 Revert "feat: Disable kube-proxy and enable Calico in eBPF mode" (#678) 2023-03-27 17:29:10 -04:00
Devin Buhl 92f2a92cda feat: Disable kube-proxy and enable Calico in eBPF mode (#677) 2023-03-25 19:54:02 -04:00
Devin Buhl 5782bf4fa8 fix: do not pin digest on flux-manifests OCI 2023-03-21 10:53:05 -04:00
Devin Buhl 0b44f2a71f chore: update link-check workflow 2023-03-21 10:10:45 -04:00
Devin Buhl f7f859f134 fix: add digest to flux-manifests tag 2023-03-21 09:59:47 -04:00
Devin Buhl 9009263468 Revert "Default to empty resolv-conf kubelet arg in agent config" (#650) 2023-03-02 17:46:57 -05:00