infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,907 Commits 41 Branches 0 Tags
d1b5fa1c9881cd802e7b63aec8dd01d442c0034b
Commit Graph
133 Commits
Author SHA1 Message Date
Jakub JędrzejczykandDevin Buhl d1b5fa1c98 Add the option for assigning a specific SSH key to a node. (#1356) 
* Add the option for specifying an SSH key.

* Add ability to specify SSH key.

* Update config.sample.yaml

* Update config.sample.yaml

* Update bootstrap/templates/ansible/inventory/hosts.yaml.j2

* Update bootstrap/templates/ansible/inventory/hosts.yaml.j2

---------

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-03-04 15:57:47 -05:00
renovate[bot] 6fc5adebba feat(ansible): update community.general to 8.4.0 (#1348) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-28 17:49:28 -05:00
renovate[bot] 3f4d31916b chore(deps): update ansible to 9.3.0 (#1347) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-28 17:49:20 -05:00
Petr Řehoř 0083f7b875 Fix cluster-kube-vip playbook (#1338) 2024-02-19 15:26:44 -05:00
Devin Buhl c17d543b21 refactor!: project updates (#1326) 
* refactor!: flux is required again

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: delimiter that chomps

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: bootstrap_cloudflare logic

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update tests

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove last quote

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-15 20:03:24 -05:00
renovate[bot] 8f2356db46 fix(helm): update chart cilium to 1.15.1 (#1323) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-15 14:41:06 -05:00
renovate[bot] 31323b4036 chore(deps): update ansible-lint to 24.2.0 (#1307) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:48:40 -05:00
renovate[bot] cb0049b918 fix(github-release): update k3s-io/k3s to v1.29.1+k3s2 (#1301) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-02-09 20:47:36 -05:00
Devin Buhl 9f45079713 feat: rename ansible hosts groups to controllers and workers 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-03 18:03:11 -05:00
Devin Buhl eab63476b7 feat(k0s): unsupport it (#1291) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-02 18:02:14 -05:00
Devin Buhl 89673cd17b feat: distribution is a dict and nodes and cluster are top level (#1288) 
* feat: distribution is a dict and nodes and cluster are top level

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: housekeeping

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-01 20:31:42 -05:00
Devin Buhl 80aa80c1ea feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry (#1284) 
* feat: upgrade k3s to 1.29.1 and enable the spegel embedded registry

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix(k3s): add the mirrors for spegel

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ordering

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-02-01 09:39:53 -05:00
renovate[bot]andDevin Buhl b24a55e790 feat(helm): update chart cilium to 1.15.0 (#1280) 
* feat(helm): update chart cilium to 1.15.0

* Update cilium-values-full.partial.yaml.j2

* Update cilium-values-init.partial.yaml.j2

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
 2024-01-31 16:43:40 -05:00
renovate[bot] 0c688dfa29 chore(deps): update ansible to 9.2.0 (#1276) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-31 08:53:23 -05:00
renovate[bot] c19dd68759 feat(ansible): update ansible.utils to 3.1.0 (#1277) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-31 08:53:16 -05:00
Devin Buhl 0021acc522 fix: talos customization multiline string and ansible raw/endraw (#1275) 
* chore: update readme and workflows

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: ansible templating

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: talos templating

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-30 21:22:33 -05:00
Devin Buhl ef563a4472 feat: add prevent downgrades check in k3s ansible 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-30 14:33:16 -05:00
renovate[bot] 44fde373f7 feat(ansible): update community.general to 8.3.0 (#1272) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-30 07:00:36 -05:00
Devin Buhl 95bf353f7e feat: rename repo to cluster-template (#1270) 
* feat: rename repo to cluster-template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

* Update README.md

* Update README.md

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-29 17:34:53 -05:00
Devin Buhl df642e5425 feat: update jinja delimiters back to default (#1269) 
* feat: update jinja delimiters back to default

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove cert-manager promrules

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update talos csr approver

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-29 17:11:37 -05:00
Devin Buhl 889ca07692 feat: refactor config file (#1267) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-28 12:41:31 -05:00
Devin Buhl 4ac206aef5 fix: remove local hostpath and cilium lb vars and update k0s (#1261) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-26 17:28:36 -05:00
renovate[bot] 95b0e2b0d8 chore(deps): update xanmanning.k3s to v3.4.4 (#1260) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-26 15:51:00 -05:00
Devin Buhl 90ca5f026f fix: address talos comments (#1253) 
* fix: update cni to cilium in taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: more updates

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: more cleanup

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: housekeeping

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-26 14:59:11 -05:00
Devin Buhl 7436eb43ce chore: update renovate config and annotations 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-25 18:39:54 -05:00
Devin Buhl 5d849727d8 feat: implement mjfilter file for templates (#1244) 
* feat: implement mjfilter file for templates

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use data.get in mjfilters

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-24 14:52:50 -05:00
Devin Buhl 84a913e350 chore: housekeeping 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-23 07:55:18 -05:00
renovate[bot] 94449b8933 fix(helm): update chart cilium to 1.14.6 (#1232) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-22 16:04:05 -05:00
Devin Buhl afbf097dac feat: update kube-vip ansible playbook for k0s and k3s - ipv6 config changes (#1234) 
* feat: update kube-vip ansible playbook for k0s and k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: move ipv6 to advanced options

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube-vip manifests to partials

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: kube vip samesies

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update config sample

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-22 15:28:21 -05:00
Devin Buhl 9373065338 feat: implement kube-vip for k0s & k3s in daemonset mode (#1230) 
* feat: implement kube-vip for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: implement kube-vip for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: k3s to ds as well

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: no j2j2 nonsense

Signed-off-by: Devin Buhl <devin@buhl.casa>

* upadte: readme and taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: renovate config

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-22 12:45:11 -05:00
Devin Buhl d9c7fd44ba feat: Do not rely on k0s file uploads - instead use curl (#1229) 
* feat: Do not rely on k0s file uploads - instead use curl

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add bootstrap_advanced_flags to validation

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only skip tests for non-static config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only skip tests for non-static config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: issues in k0s scripts

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: taskfile

Signed-off-by: Devin Buhl <devin@buhl.casa>

* update: k0s config and remove ansible hook

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-22 10:14:49 -05:00
Devin Buhl e1330d734c feat: more changes to templating (#1218) 
* feat: clean up more jinja default references

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add additional tls sans force kube-vip on k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-21 11:39:12 -05:00
Devin Buhl 8339d142b7 feat: move various config options to advanced flags (#1217) 
* feat: move various config options to advanced flags

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: remove lp refs

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-21 09:53:25 -05:00
Devin Buhl b89b7b3ed9 feat: migrate to python for data validation (#1214) 
* feat: migrate to python for data validation

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: address PR comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add unused kwargs to validate functions

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update renovate pip and ansible regex

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add bootstrap_nodes test

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update taskfiles

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-21 08:35:21 -05:00
Devin Buhl 1ec59d1559 feat: add advanced features to config (#1208) 
* feat: add advanced features to config

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: only enable longhorn if distro is k3s or k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update ansible lint

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-20 12:27:20 -05:00
renovate[bot] 52aa4b5c89 fix(helm): update chart cilium to 1.14.6 (#1198) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-01-19 21:28:37 -05:00
Devin Buhl 965bfcdcb9 feat: k0s remove isolated controllers support and ansible prepare playbook (#1205) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-19 17:35:33 -05:00
Devin Buhl 79d849f0ac feat: add custom dns server support (#1199) 
* feat: add custom dns server support

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: jinja tmpl

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-19 07:22:21 -05:00
Devin Buhl eed4faa9e6 fix: keep included k3s coredns (#1197) 
* Delete bootstrap/templates/kubernetes/apps/kube-system/coredns directory

* Update kustomization.yaml.j2

* Delete bootstrap/templates/ansible/playbooks/templates/custom-coredns-helmchart.yaml.j2.j2

* Update cluster-installation.yaml.j2

* Delete bootstrap/templates/ansible/playbooks/tasks/coredns.yaml.j2

* Update main.yaml.j2

* Update main.yaml.j2

* Update main.yaml.j2

* Update main.yaml.j2

* Update cluster-installation.yaml.j2
 2024-01-19 06:13:39 -05:00
Devin Buhl 91d8b84f3c feat: add talos support (#1192) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-19 05:36:25 -05:00
Devin Buhl 0c4f0260d5 fix: ansible dir should only exist for k3s and k0s (#1191) 
* fix: ansible dir should only exist for k3s and k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: rename partial files

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-18 13:52:11 -05:00
Devin Buhl d46e7f9663 feat: add partial support, change k0s config filename, always use NLLB for k0s (#1180) 
* feat: add partial support, change k0s config filename, always use NLLB for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update wording

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-18 08:38:03 -05:00
Devin Buhl 13a005d23d feat: k3s use 127.0.0.1:6444 for Cilium k8sServiceHost:k8sServicePort 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-18 06:27:58 -05:00
Devin Buhl 95094450fb feat: enable etcd monitoring for k0s (#1179) 
* feat: enable etcd monitoring for k0s

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: always enable etcd on k3s

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-17 19:44:53 -05:00
Devin Buhl 528508e834 feat: add ansible lint, update taskfiles, and makejinja to not strip trailing newlines (#1172) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-16 14:23:08 -05:00
Devin Buhl b41ccc8145 fix: add tls sans options for k3s too (#1170) 
* fix: add tls sans options for k3s too

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update comment

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-16 10:52:48 -05:00
Devin Buhl 295f2e7eac fix: kube-vip was not rendering when enabled (#1169) 
* fix: kube-vip was not rendering when enabled

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: forgot to save a file

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-16 09:56:41 -05:00
Devin Buhl 646f335689 feat: change jinja variable start/end delimiters to avoid conflicts with go templating (#1168) 
* feat: change jinja variable start/end delimiters to avoid conflicts with go templating

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update comment in makejinja.toml

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update comment in makejinja.toml

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-16 09:25:12 -05:00
Devin Buhl 93c9d21581 feat: change jinja block/start delimiters for renovate support (#1163) 
* feat: change jinja block/start delimiters for renovate support

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update renovate config an helm repos

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-15 19:31:45 -05:00
Devin Buhl e6fbc6e128 feat: remove the need for raw jinja blocks (#1158) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2024-01-15 00:03:41 -05:00