infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,287 Commits 41 Branches 0 Tags
e6cae4e699493e61d7cbe9231ef54710e8603729
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl e6cae4e699 fix(grafana): add ingress-nginx dashboard & update datasources 2023-07-20 11:31:41 -04:00
Devin Buhl 571a7454c0 refactor: install ansible with Python venv (#863) 2023-07-19 11:03:59 -04:00
Devin Buhl c48083ca6b fix: cloudflared brew package 2023-07-19 07:32:10 -04:00
Devin Buhl 3610c39a31 chore: phoneops readme changes 2023-07-18 23:09:34 -04:00
Devin Buhl f33054d57f chore: readme sops age key env is in direnv 2023-07-17 06:43:05 -04:00
Devin Buhl 253f033778 chore: readme refactoring (#850) 2023-07-16 13:25:58 -04:00
Devin Buhl 6dec8a4857 chore: mention ssh agent example in resent 2023-07-15 21:23:28 -04:00
Devin Buhl 40902d60ff fix: jinja2 comments needed for suc 2023-07-15 15:35:04 -04:00
Devin Buhl 48b5ed75b4 feat: enable cilium grafana dashboards 2023-07-14 17:45:22 -04:00
Devin Buhl c9d988a66f feat!: template all ansible dir and rename template to bootstrap (#847) 2023-07-12 11:44:23 -04:00
Devin Buhl 4a0facce65 chore: use pull_request_target on labeler 2023-07-08 19:54:53 -04:00
Devin Buhl 0b4f32bd7a feat: add csi-driver-nfs addon (#837) 2023-07-06 15:02:23 -04:00
Devin Buhl 34527bd3e2 feat(ansible): Add addon support (#836) 2023-07-06 14:21:32 -04:00
Devin Buhl fe41cf6ea5 feat: move kubernetes dir into templates to support jinja2 across all files (#831) 2023-07-05 21:17:10 -04:00
Devin Buhl 7b0a154fed fix(ansible): keep apparmor installed but mask the service 
Also add task back in for updating `/etc/hosts` since hostname doesn't change this file
 2023-07-05 18:49:18 -04:00
Devin Buhl 0df7ec6526 feat!: debian 12 to the moon (#830) 2023-07-05 10:36:05 -04:00
Devin Buhl 73bed06eba fix: use http2 for cloudflared 2023-07-05 03:59:42 -04:00
Devin Buhl 39643241f9 chore: use cmd in root taskfile 2023-07-04 20:21:11 -04:00
Devin Buhl 2f4b59c8aa fix: do not reboot twice when using taskfile to nuke 2023-07-04 20:01:39 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin Buhl 9cd26e9d11 feat: manage the cilium l2 config with flux (#827) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 17:01:36 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822) 
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
 2023-07-04 11:36:58 -04:00
Devin Buhl 467af18b0f feat!: Drop Metallb in favor of Cilium L2Announcements (#821) 2023-07-03 14:47:51 -04:00
Devin Buhl 4905990750 fix(ansible): forgot to rename this file 2023-07-03 13:11:29 -04:00
Devin Buhl 3dcec5faaa feat(ansible): Add stale container weekly systemd timer 2023-07-01 11:18:25 -04:00
Devin Buhl 8d67a5988b fix: do not manage Foreign Routes or Foreign Routing Rules 2023-07-01 08:09:02 -04:00
Devin Buhl 635113c9f6 feat: remove pre-commit from template (#810) 2023-06-30 09:09:53 -04:00
Devin Buhl 5a531b1d15 fix: set grafana deploymentStrategy to Recreate 2023-06-29 18:03:53 -04:00
Devin Buhl 260aefc5d0 chore: Update README.md 2023-06-29 12:40:17 -04:00
Devin Buhl b1049ee1bf Revert "fix(helm): update chart cilium to 1.13.4 (#795)" (#798) 
This reverts commit 593549ad35.
 2023-06-17 06:57:01 -04:00
Devin Buhl 4f04accc30 fix: update k3s Ansible role to v3.4.2 2023-06-17 06:55:05 -04:00
Devin Buhl 3116a10429 fix: k3s not cleaning up the cilium helmchart 2023-06-12 19:36:36 -04:00
Devin Buhl b539157979 fix: use wait: true on cilium helmchart removal 2023-06-11 20:34:12 -04:00
Devin Buhl 859b8c27b2 fix: use admin username on weave dashboard 2023-06-09 10:14:48 -04:00
Devin Buhl eb311c0a53 fix: update reloader secret on weave gitops 2023-06-08 09:56:59 -04:00
Devin Buhl 4ae51b0db8 feat: Remove Fedora server as supported OS (#774) 2023-06-05 11:15:34 -04:00
Devin Buhl c11092b261 fix: proper of wait and dependsOn in flux ks and hr (#771) 2023-06-04 09:07:50 -04:00
Devin Buhl ab1af57f79 chore: update readme 2023-06-03 10:02:02 -04:00
Devin Buhl 3743149bac chore: rework cluster:reconcile task 2023-06-01 16:06:09 -04:00
Devin Buhl dfa7a1adea fix: add legacy master role to toleration too 2023-06-01 11:19:21 -04:00
Devin Buhl 62e560e565 fix: add tolerations on server plan 2023-06-01 11:16:29 -04:00
Devin Buhl 87f2f9cc6d chore: force flux versioning to semver 2023-06-01 09:16:44 -04:00
Devin Buhl 105cf542d0 fix: use temp ansible galaxy branch to ensure kube-vip is installed on all controllers 2023-05-31 21:43:02 -04:00
Devin Buhl 6db540671a fix: do not use serviceAccountName in kube-vip static pod 2023-05-31 12:03:18 -04:00
Devin Buhl d5107d6b90 feat: Add grafana and kube-prometheus-stack HelmReleases (#758) 2023-05-31 10:16:30 -04:00
Devin Buhl 3c0f5554a9 fix: speed up nuke playbook by preventing k3s from starting on next reboot 2023-05-30 17:19:58 -04:00
Devin Buhl efc1fc0bb0 chore: update readme 2023-05-29 15:25:03 -04:00
Devin Buhl d8aea6de29 feat: allow flux to take over cilium (#755) 2023-05-29 09:38:06 -04:00
Devin Buhl 5b9468dcd2 fix: use raw URL for gitlab dashboard 2023-05-28 12:41:11 -04:00
Devin Buhl 2899466303 feat!: replace calico with cilium (#740) 2023-05-28 11:23:09 -04:00
Devin Buhl edb3b21310 fix: ansible error when trying to delete files 2023-05-27 17:34:31 -04:00
Devin Buhl 10ed9fbacb fix(ansible): bump calico version to 3.25.1 2023-05-10 13:23:27 -04:00
Devin Buhl e91cacd4e2 chore: remove terraform references from README 2023-05-10 13:15:47 -04:00
Devin Buhl ffa3eceb30 Swap deps on external-dns and cloudflared (#725) 
* Swap deps on external-dns and cloudflared

* Update ks.yaml
 2023-05-09 21:46:46 -04:00
Devin Buhl 4e4c03f7be chore: update internal dns section in readme 2023-05-07 17:43:18 -04:00
Devin Buhl f4d7a4fe49 chore: hopefully more clear on internal dns in readme 2023-05-07 16:41:35 -04:00
Devin Buhl d8e23540f2 chore: readme grammar and spelling 2023-05-07 16:28:53 -04:00
Devin Buhl a757b553cb chore: clear up main readme section 2023-05-07 16:27:49 -04:00
Devin Buhl abcb8b53a4 chore: more greater internal dns README 2023-05-06 14:23:29 -04:00
Devin Buhl f0cb9692a4 chore: update readme with clearer internal dns explanations 2023-05-06 14:21:12 -04:00
Devin Buhl efd558e022 fix: add cloudflared to kustomization.yaml 2023-05-06 12:07:31 -04:00
Devin Buhl 96d3c7841c fix: add back in templating out external-dns secret 2023-05-06 07:49:30 -04:00
Devin Buhl 48a3e5f80e fix: SECRET_DOMAIN spelling 2023-05-05 12:29:22 -04:00
Devin Buhl 08c032ac58 fix: update the secret type to stringData 2023-05-05 11:39:50 -04:00
Devin Buhl 3449ccda40 fix: use proper helm repo name for bjw-s charts 2023-05-05 11:39:24 -04:00
Devin Buhl 65f6e80086 chore: fix typo in readme 2023-05-04 19:41:55 -04:00
Devin Buhl b917eccb76 Revert "feat(github-release): update k3s-io/k3s to v1.27.1+k3s1 (#710)" (#715) 
This reverts commit 1080234b8a.
 2023-05-01 20:23:15 -04:00
Devin Buhl 9043eddd45 fix: set containerIPForwarding to Enabled in Calico config 2023-04-29 14:45:54 -04:00
Devin Buhl 432d281287 fix: automerge containers pinned to a digest 2023-04-29 14:16:10 -04:00
Devin Buhl d025b91352 fix: Update bootstrap kustomization and include note in file 2023-04-13 09:24:02 -04:00
Devin Buhl 278e55b10a feat: Enable drift detection and oom watcher for helm controller 2023-04-13 09:17:31 -04:00
Devin Buhl 79968169bc fix: actually set the correct flux version in bootstrap 2023-04-09 20:41:22 -04:00
Devin Buhl 70c1799d76 feat!: Upgrade Flux to v2.0.0-rc.1 and update apiVersions (#693) 2023-04-08 13:41:58 -04:00
Devin Buhl 7c2ebedc98 chore: be clear about not using Ubuntu server minimal 2023-04-02 10:54:44 -04:00
Devin Buhl 07decda9b4 Revert "feat: Disable kube-proxy and enable Calico in eBPF mode" (#678) 2023-03-27 17:29:10 -04:00
Devin Buhl 92f2a92cda feat: Disable kube-proxy and enable Calico in eBPF mode (#677) 2023-03-25 19:54:02 -04:00
Devin Buhl 5782bf4fa8 fix: do not pin digest on flux-manifests OCI 2023-03-21 10:53:05 -04:00
Devin Buhl 0b44f2a71f chore: update link-check workflow 2023-03-21 10:10:45 -04:00
Devin Buhl f7f859f134 fix: add digest to flux-manifests tag 2023-03-21 09:59:47 -04:00
Devin Buhl 9009263468 Revert "Default to empty resolv-conf kubelet arg in agent config" (#650) 2023-03-02 17:46:57 -05:00
Devin Buhl bd0add8cf1 chore: use raw github URLs in k3s server manifests urls 2023-02-08 09:29:05 -05:00
Devin Buhl 6d02c9ca5c chore: set link checker to once a week 2023-02-03 17:23:42 -05:00
Devin Buhl 688cbf2b0e fix: try to prevent errors by only enabling the substitution label on kustomizations 2023-01-30 11:31:44 -05:00
Devin Buhl 7cdf4096dd chore(renovate): match kubernetes manifests in the ansible dir 2023-01-20 23:47:01 -05:00
Devin Buhl 4b9b69eb41 fix: remove cluster rollout playbook for now since it doesn't work and I don't know how to make it work 2023-01-13 14:47:30 -05:00
Devin Buhl 458fe7e703 fix(taskfile): add SOPS_AGE_KEY_FILE to env 2023-01-11 10:24:07 -05:00
Devin Buhl fcd9f67cbb fix(taskfile): remove reconcile in install task, this should be happening already 2023-01-11 10:19:10 -05:00
Devin Buhl 2acebc1a9f chore: update readme 2023-01-11 10:18:13 -05:00
Devin Buhl 2acbbefd15 chore: another fedora and ubuntu update in readme 2023-01-08 11:10:27 -05:00
Devin Buhl 9b1740a8e4 chore: mention ubuntu and fedora in places 2023-01-08 11:03:08 -05:00
Devin Buhl 27f660addc fix: add nfs-common to ubuntu packages 2023-01-07 23:53:51 -05:00
Devin Buhl 040ac65aa3 chore: use org level funding 2023-01-06 15:07:29 -05:00
Devin Buhl 2a26756dcb chore: update lycheeignore 2023-01-05 13:42:23 -05:00
Devin Buhl 203814adff chore: update README to mention age/cloudflare secrets are filled out in a following step 2023-01-04 16:58:36 -05:00
Devin Buhl 04611fc740 feat: add raspi packages 2023-01-02 19:44:16 -05:00
Devin Buhl 5af6faac47 chore: create funding file since org level funding ain't workin' 2023-01-01 09:42:40 -05:00
Devin Buhl 08040e3e49 fix: update ingress on hajimari 2022-12-24 17:10:27 -05:00
Devin Buhl 0a5dfb361e fix: update ingress on echo server 2022-12-24 17:07:18 -05:00
Devin Buhl ffa402f5e3 chore: auto merge branch style 2022-12-24 10:53:54 -05:00
Devin Buhl 8f3f4d8fc7 chore: use automergeType of pr to include in release notes 2022-12-23 14:05:49 -05:00