infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,585 Commits 41 Branches 0 Tags
ec8c19a24e58a258c2cca09efffacfa5f40690d1
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl eb4832d01a chore: update the lychee workflow to be more smarter about finding the link checker issue 2023-12-24 14:41:06 -05:00
Devin Buhl a0bf578111 chore(ansible): clean up indentation 2023-12-21 12:00:49 -05:00
Devin Buhl bd2d784b0f fix(ansible): longhorn components are now a daemonset, no need to use the selector 2023-12-21 12:00:00 -05:00
Devin Buhl 429ef51c96 fix: missing name on cluster-rollout-update playbook 2023-12-11 17:57:30 -05:00
Devin Buhl ebaccf69bb chore: update bootstrap_cilium_loadbalancer_mode description comments 2023-12-11 17:45:10 -05:00
Devin Buhl a374c72887 fix: be a bit smarter when reloading kernel modules 2023-12-11 15:31:12 -05:00
Devin Buhl bf28fbaebf fix: instead of defining modules twice just restart the modules-load service 2023-12-11 15:14:17 -05:00
Devin Buhl 65bfe7a992 fix: ManageForeignRoutes is not needed anymore 
https://github.com/cilium/cilium/pull/27208/
 2023-12-11 14:56:28 -05:00
Devin Buhl 929fdbd1b5 fix: set permission for labeler workflow 2023-12-11 12:05:02 -05:00
Devin Buhl e504f6119d chore: add admonishes to readme 2023-12-10 09:04:54 -05:00
Devin Buhl 6547d8277e fix: downgrade bcrypt due to passlib issue 2023-12-03 13:58:55 -05:00
Devin Buhl b5ff534f06 fix: run kube-vip playbook one node at a time 2023-12-03 09:04:28 -05:00
Devin Buhl de6bf19acd chore: fix cf link in readme 2023-12-02 19:11:06 -05:00
Devin Buhl 7e8cb5b5e4 chore: add SUC group to renovate config 2023-12-01 20:20:43 -05:00
Devin Buhl 2a1e4a4a31 chore: add release file to exclude renovate from changelog 2023-12-01 08:08:05 -05:00
Devin Buhl fe56fa0653 chore: fix task prompt spelling 2023-11-29 11:17:36 -05:00
Devin Buhl ee81349379 chore: add a task prompt on task configure 2023-11-29 11:03:52 -05:00
Devin Buhl 14bba07cc5 chore: add ansible-lint 2023-11-29 10:15:53 -05:00
Devin Buhl 08cea788b0 chore: add k8s and ansible config to vscode settings 2023-11-29 10:14:01 -05:00
Devin Buhl 0f7623c40b chore: update required python version to 3.10+ 2023-11-27 21:15:42 -05:00
Devin Buhl ae22b649e4 fix: add tolerations back to suc server plan 2023-11-26 13:32:18 -05:00
Devin Buhl 924fa044b2 chore: update readme 2023-11-25 19:10:31 -05:00
Devin Buhl 8b23097e1e fix: templating error on volsync prom rules 2023-11-24 10:52:26 -05:00
Devin Buhl 84574b2f64 feat!: Update Flux ks names and add volsync and snapshot-controller (#1036) 2023-11-23 17:49:40 -05:00
Devin Buhl fc3c7b56af revert: "feat(k3s): enable encryption at rest and stargz snapshotter" 
stargz broken
 2023-11-22 22:16:21 -05:00
Devin Buhl fdff319d4f feat(k3s): enable encryption at rest and stargz snapshotter 2023-11-22 20:15:04 -05:00
Devin Buhl 30cccac0ce fix: remove dupe when 2023-11-22 19:52:39 -05:00
Devin Buhl 521b08de99 chore: englash is hard 2023-11-21 17:47:05 -05:00
Devin Buhl 787aed1db2 chore: add a pre-start checklist item 2023-11-21 17:40:40 -05:00
Devin Buhl f47987ccdf fix: remove experimental Flux Helm drift detection 2023-11-21 17:27:10 -05:00
Devin Buhl 3ab157eb23 Update README.md 2023-11-17 18:46:51 -05:00
Devin Buhl d0f4708027 fix: upgrade bootstrap prom crd versions 2023-11-12 10:25:34 -05:00
Devin Buhl ab25928398 fix: add back spec.[install|upgrade].crds: CreateReplace to kps helm release 2023-11-12 10:20:57 -05:00
Devin Buhl 3f4bbb8405 fix: use git source for k3s galaxy role 2023-11-04 10:48:45 -04:00
Devin Buhl ddb3915a07 fix: remove secret on k8s dashboard ingress 2023-10-07 17:53:01 -04:00
Devin Buhl abcd85a5b9 fix: remove default main.yaml 2023-09-19 12:07:09 +08:00
Devin Buhl 352ac7060b fix: enable post quantum in cloudflared 2023-09-02 16:33:49 -04:00
Devin Buhl 760f15439e fix: enable k8s api load balancing over ipvs in kube-vip 2023-08-30 08:01:45 -04:00
Devin Buhl b21d68a884 fix: add trustCRDsExist to cilium helmrelease 2023-08-15 12:14:05 -04:00
Devin Buhl adda5de03f chore: update renovate regexes 2023-08-13 13:11:15 -04:00
Devin Buhl d292d701ee chore: update readme 2023-08-08 08:44:02 -04:00
Devin Buhl 9a5f117518 chore: run apt update before installing sudo 2023-08-06 18:23:45 -04:00
Devin Buhl ff8eb5652f fix: change external ingress to NOT be default 2023-08-05 09:58:03 -04:00
Devin Buhl 377bdb3d72 feat!: Separate out internal and external nginx controllers (#880) 2023-07-31 13:40:35 -04:00
Devin Buhl 639fc37328 chore: remove accidental yaml schema comment 2023-07-29 06:53:09 -04:00
Devin Buhl 3c6f701b6a fix: update SUC kustomization due to kustomize build warnings 2023-07-29 06:51:46 -04:00
Devin Buhl 3813133196 chore: add mikestead.dotenv to vscode extensions 2023-07-26 18:00:05 -04:00
Devin Buhl 1a616bcff2 chore: add sops age key setting in vscode settings 2023-07-24 16:03:34 -04:00
Devin Buhl f3c019fcb1 fix: system-upgrade-controller renovate comment 2023-07-21 19:58:49 -04:00
Devin Buhl eae6d990ae chore: update renovate config 2023-07-21 19:56:32 -04:00
Devin Buhl e64793f367 chore: task certificatereq is part of certificates task 2023-07-20 15:43:07 -04:00
Devin Buhl e6cae4e699 fix(grafana): add ingress-nginx dashboard & update datasources 2023-07-20 11:31:41 -04:00
Devin Buhl 571a7454c0 refactor: install ansible with Python venv (#863) 2023-07-19 11:03:59 -04:00
Devin Buhl c48083ca6b fix: cloudflared brew package 2023-07-19 07:32:10 -04:00
Devin Buhl 3610c39a31 chore: phoneops readme changes 2023-07-18 23:09:34 -04:00
Devin Buhl f33054d57f chore: readme sops age key env is in direnv 2023-07-17 06:43:05 -04:00
Devin Buhl 253f033778 chore: readme refactoring (#850) 2023-07-16 13:25:58 -04:00
Devin Buhl 6dec8a4857 chore: mention ssh agent example in resent 2023-07-15 21:23:28 -04:00
Devin Buhl 40902d60ff fix: jinja2 comments needed for suc 2023-07-15 15:35:04 -04:00
Devin Buhl 48b5ed75b4 feat: enable cilium grafana dashboards 2023-07-14 17:45:22 -04:00
Devin Buhl c9d988a66f feat!: template all ansible dir and rename template to bootstrap (#847) 2023-07-12 11:44:23 -04:00
Devin Buhl 4a0facce65 chore: use pull_request_target on labeler 2023-07-08 19:54:53 -04:00
Devin Buhl 0b4f32bd7a feat: add csi-driver-nfs addon (#837) 2023-07-06 15:02:23 -04:00
Devin Buhl 34527bd3e2 feat(ansible): Add addon support (#836) 2023-07-06 14:21:32 -04:00
Devin Buhl fe41cf6ea5 feat: move kubernetes dir into templates to support jinja2 across all files (#831) 2023-07-05 21:17:10 -04:00
Devin Buhl 7b0a154fed fix(ansible): keep apparmor installed but mask the service 
Also add task back in for updating `/etc/hosts` since hostname doesn't change this file
 2023-07-05 18:49:18 -04:00
Devin Buhl 0df7ec6526 feat!: debian 12 to the moon (#830) 2023-07-05 10:36:05 -04:00
Devin Buhl 73bed06eba fix: use http2 for cloudflared 2023-07-05 03:59:42 -04:00
Devin Buhl 39643241f9 chore: use cmd in root taskfile 2023-07-04 20:21:11 -04:00
Devin Buhl 2f4b59c8aa fix: do not reboot twice when using taskfile to nuke 2023-07-04 20:01:39 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin Buhl 9cd26e9d11 feat: manage the cilium l2 config with flux (#827) 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 17:01:36 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822) 
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
 2023-07-04 11:36:58 -04:00
Devin Buhl 467af18b0f feat!: Drop Metallb in favor of Cilium L2Announcements (#821) 2023-07-03 14:47:51 -04:00
Devin Buhl 4905990750 fix(ansible): forgot to rename this file 2023-07-03 13:11:29 -04:00
Devin Buhl 3dcec5faaa feat(ansible): Add stale container weekly systemd timer 2023-07-01 11:18:25 -04:00
Devin Buhl 8d67a5988b fix: do not manage Foreign Routes or Foreign Routing Rules 2023-07-01 08:09:02 -04:00
Devin Buhl 635113c9f6 feat: remove pre-commit from template (#810) 2023-06-30 09:09:53 -04:00
Devin Buhl 5a531b1d15 fix: set grafana deploymentStrategy to Recreate 2023-06-29 18:03:53 -04:00
Devin Buhl 260aefc5d0 chore: Update README.md 2023-06-29 12:40:17 -04:00
Devin Buhl b1049ee1bf Revert "fix(helm): update chart cilium to 1.13.4 (#795)" (#798) 
This reverts commit 593549ad35.
 2023-06-17 06:57:01 -04:00
Devin Buhl 4f04accc30 fix: update k3s Ansible role to v3.4.2 2023-06-17 06:55:05 -04:00
Devin Buhl 3116a10429 fix: k3s not cleaning up the cilium helmchart 2023-06-12 19:36:36 -04:00
Devin Buhl b539157979 fix: use wait: true on cilium helmchart removal 2023-06-11 20:34:12 -04:00
Devin Buhl 859b8c27b2 fix: use admin username on weave dashboard 2023-06-09 10:14:48 -04:00
Devin Buhl eb311c0a53 fix: update reloader secret on weave gitops 2023-06-08 09:56:59 -04:00
Devin Buhl 4ae51b0db8 feat: Remove Fedora server as supported OS (#774) 2023-06-05 11:15:34 -04:00
Devin Buhl c11092b261 fix: proper of wait and dependsOn in flux ks and hr (#771) 2023-06-04 09:07:50 -04:00
Devin Buhl ab1af57f79 chore: update readme 2023-06-03 10:02:02 -04:00
Devin Buhl 3743149bac chore: rework cluster:reconcile task 2023-06-01 16:06:09 -04:00
Devin Buhl dfa7a1adea fix: add legacy master role to toleration too 2023-06-01 11:19:21 -04:00
Devin Buhl 62e560e565 fix: add tolerations on server plan 2023-06-01 11:16:29 -04:00
Devin Buhl 87f2f9cc6d chore: force flux versioning to semver 2023-06-01 09:16:44 -04:00
Devin Buhl 105cf542d0 fix: use temp ansible galaxy branch to ensure kube-vip is installed on all controllers 2023-05-31 21:43:02 -04:00
Devin Buhl 6db540671a fix: do not use serviceAccountName in kube-vip static pod 2023-05-31 12:03:18 -04:00
Devin Buhl d5107d6b90 feat: Add grafana and kube-prometheus-stack HelmReleases (#758) 2023-05-31 10:16:30 -04:00
Devin Buhl 3c0f5554a9 fix: speed up nuke playbook by preventing k3s from starting on next reboot 2023-05-30 17:19:58 -04:00
Devin Buhl efc1fc0bb0 chore: update readme 2023-05-29 15:25:03 -04:00
Devin Buhl d8aea6de29 feat: allow flux to take over cilium (#755) 2023-05-29 09:38:06 -04:00
Devin Buhl 5b9468dcd2 fix: use raw URL for gitlab dashboard 2023-05-28 12:41:11 -04:00