infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,549 Commits 41 Branches 0 Tags
eebbd5828e1e001b7c3d2795a7ee7964fcf7564e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl eebbd5828e feat: update flux OCIRepo version 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-12 11:33:26 -05:00
Devin Buhl ab7a99abbe feat: add bootstrap_cilium_loadbalancer_mode config option and default to dsr 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-11 16:07:57 -05:00
Devin Buhl e14d5f5071 fix: update xanmanning 
k3s ansible role

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-09 09:26:32 -05:00
Devin Buhl a489ff223f chore: add new local path var to required vars and fix indenting 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-08 13:52:54 -05:00
Devin Buhl 311863e017 feat: allow overriding the default local-path-provisioner path for PVC data 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-07 18:06:15 -05:00
Devin Buhl 90eff07152 feat: enable secrets encryption on k3s 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-07 17:10:58 -05:00
Devin Buhl f5857bb15e feat: use official pause container because dockerhub sucks 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-07 17:05:23 -05:00
Devin Buhl e660fbaa1e fix: change attribute before deleting the file 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-03 17:20:00 -05:00
Devin Buhl e0a3a510d7 chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-03 10:35:50 -05:00
Devin Buhl e2d183145a chore: add flux-local mention in README 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-03 10:18:47 -05:00
Devin Buhl 9d9c0bf67c chore: update devcontainer 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-01 19:46:44 -05:00
Devin Buhl 4400029904 chore: update devcontainer 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-12-01 19:44:02 -05:00
Devin Buhl c749ff8f90 fix: add task for updating from the upstream template 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-29 16:07:50 -05:00
Devin Buhl 63edb13d9e fix: move renovate config into mono config file 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-24 19:48:04 -05:00
Devin Buhl c7d8c2f78f fix: renovate k3s builds numbers 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-24 14:15:54 -05:00
Devin Buhl 92f4a990d9 feat: move tehSUC into kube-system 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-24 14:11:38 -05:00
Devin Buhl f85ba35fdb fix: update serviceaccount on system-upgrade-controller 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-24 13:56:47 -05:00
Devin Buhl 115e59e6cd feat: convert system-upgrade-controller to a helm chart 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-23 20:48:55 -05:00
Devin Buhl fde77c3f9e feat(ansible): remove search domain from /etc/resolv.conf 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-21 10:12:48 -05:00
Devin Buhl 70a3cede76 chore: add calver release script 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-06 09:01:33 -05:00
Devin Buhl 49c491b806 feat: upgrade app-template charts to 2.0.3 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-11-02 13:05:58 -04:00
Devin Buhl d93e1f686e fix: there are not aliases in YAML multi-line strings 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-10-07 15:23:44 -04:00
Devin Buhl 587c465288 fix: name should be first in valuesFrom 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-10-07 15:12:38 -04:00
Devin Buhl 9abcf47a58 fix: break out kps and cilium helm values into separate configmap in order to make renovate happy 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-10-07 15:11:25 -04:00
Devin Buhl d854b89574 fix: bump kps and prom operator crd versions 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-10-03 15:41:37 -04:00
Devin Buhl d0e9bf8f2d fix: update cilium kubeProxyReplacement helm value 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-09-03 09:37:31 -04:00
Devin Buhl ea0cda5561 chore: update config sample to explain config for no worker nodes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-08-21 11:47:27 -04:00
Devin Buhl 4e335b284a fix: add /dev/stdin as sops path_regex 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-08-20 07:44:12 -04:00
Devin Buhl 5abec4579c chore: update sys reqs in readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-08-08 09:09:12 -04:00
Devin Buhl 4732d04a3f chore: remove release-drafter due to not supporting calver 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-08-08 08:56:14 -04:00
Devin Buhl b87eb9ba97 chore: update release drafter and labels 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-08-08 08:52:51 -04:00
Devin Buhl b7dc1df396 feat: add flux diff local action workflow 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-08-07 08:31:39 -04:00
Devin Buhl 0cc281e7c9 chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-08-05 09:21:44 -04:00
Devin Buhl f037aa4a55 chore: renovate helm.cattle.io/v1 HelmCharts 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-27 07:55:27 -04:00
Devin Buhl 195425bbe0 feat: Implement Grafana folders for existing dashboards and add new ones 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-23 20:59:20 -04:00
Devin Buhl 1b72e74b4c chore: rearrange metric relabelings 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-22 09:02:41 -04:00
Devin Buhl 47bee51e8e fix: use sourceLabels instead of source_labels 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-22 08:59:13 -04:00
Devin Buhl 3a74be1eeb feat: Update KPS and include scrapeconfigs in bootstrap 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-22 08:54:03 -04:00
Devin Buhl 155cfc9887 fix(ansible): enable sops vars plugin in direnv 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-19 15:32:46 -04:00
Devin Buhl b2352b3679 fix(ansible): enable sops vars plugin 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-19 15:31:39 -04:00
Devin Buhl e4d1fa15d6 fix(ansible): update cluster-rollout-update playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-19 08:27:00 -04:00
Devin Buhl a6f95389ad chore(renovate): include addons dir for processing 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-18 13:53:34 -04:00
Devin Buhl 125f4b77cb chore: move somethings to whats next section of readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-18 08:36:07 -04:00
Devin Buhl 4efb88066e chore: update debian section in readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-18 07:52:38 -04:00
Devin Buhl 40b97fd841 fix: upgrade cilium helm version to 1.14.0-rc.1 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-18 07:30:30 -04:00
Devin Buhl 4dd5f9d5a8 feat: re-introduce flux vars for cluster network settings 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 20:52:12 -04:00
Devin Buhl 34b87d6a52 fix: rename bootstrap_acme_enable_production_certs var 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 20:11:25 -04:00
Devin Buhl 0a894a9786 feat: move sops rename/restore to a ansible task 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 19:16:31 -04:00
Devin Buhl bd2b24aad0 chore: update logic in cilium helmchart and var ordering 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 18:04:58 -04:00
Devin Buhl e447d28df7 chore: update ansible assertion formatting 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 17:30:37 -04:00
Devin Buhl cf34c795b6 fix: when IPv6 is enabled cilium l2 CRs are not needed 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 17:25:15 -04:00
Devin Buhl 9391b0f15f fix: when IPv6 is enabled cilium l2 CRs are not needed 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 17:21:01 -04:00
Devin Buhl 1b020d8fb5 fix: add jinja2 strip config to coredns helmchart 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-17 16:53:00 -04:00
Devin Buhl 4eb56a0f6e chore: clean up readme indentation 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-15 16:42:01 -04:00
Devin Buhl 0e687e0b4e chore: clean up readme use real commands in certian places 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-15 16:39:14 -04:00
Devin Buhl cae77d2871 chore: clean up readme verification steps 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-15 16:26:05 -04:00
Devin Buhl 42e4de3eac feat: add bootstrap_acme_enable_production_certs config var 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-15 15:25:27 -04:00
Devin Buhl 983ba00cc6 chore: clean up readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-15 14:58:00 -04:00
Devin Buhl 027d3b2dbd feat: move system-upgrade-controller to addons 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-15 14:44:06 -04:00
Devin Buhl 802f390f61 chore: apply feedback on readme and vars 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-15 14:30:26 -04:00
Devin Buhl ffcd319c99 fix: set permissions on files to 0644 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-14 20:04:36 -04:00
Devin Buhl c92f732828 fix(ansible): hushlogin for root or user 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-12 18:47:13 -04:00
Devin Buhl 700c248487 fix: safe guard coredns and cilium by setting prune to false 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-12 14:46:58 -04:00
Devin Buhl 8d3dafe2df chore: update readme to use apt again 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-12 11:54:02 -04:00
Devin Buhl 14e03b23f0 fix: fiddle with cilium l2announcement values 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-11 14:58:04 -04:00
Devin Buhl 26457b89ed fix: include localRedirectPolicy in cilium helmrelease 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-11 13:37:29 -04:00
Devin Buhl d3c547a20d fix: set replicas to 1 on cilium operator 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-11 13:23:22 -04:00
Devin Buhl 4fbcba348f fix(ansible): in the case of cluster-installation playbook failure still clean up helmchart resources on next run 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-10 13:33:20 -04:00
Devin Buhl 73f53d2fca chore: update sample vars comments 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-10 13:28:17 -04:00
Devin Buhl 965a294943 fix: Cilium l2announcements lease config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-07 09:15:16 -04:00
Devin Buhl ff5e52559b fix: set coredns label override and service name 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 18:06:48 -04:00
Devin Buhl 2b5c1b1c98 chore: update taskfile to have guidance on next steps after init 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 17:00:44 -04:00
Devin Buhl 0d17e11709 feat!: change some task names for better user experiance 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 16:29:17 -04:00
Devin Buhl dfee1cbb97 chore: update readme - note about additional addons 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 15:39:22 -04:00
Devin Buhl abc082fafb chore: update readme - instructions for addons 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 15:11:46 -04:00
Devin Buhl 8af4377aa3 chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 10:58:59 -04:00
Devin Buhl 14d72ae55a fix(ansible): use localhost when getting repository path for kubeconfig 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 09:08:50 -04:00
Devin Buhl e191ff3ce7 chore: kustomize is a renovate manager 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 09:04:00 -04:00
Devin Buhl f55995e14c chore: simplify renovate config filematch 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 09:01:12 -04:00
Devin Buhl d7d595da75 chore: update renovate config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 08:53:25 -04:00
Devin Buhl 183c827136 fix: update gha config, renovate and README.md 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-06 08:43:38 -04:00
Devin Buhl b714540000 fix: coredns is part of the docker oss program and not rate limited 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-05 08:27:28 -04:00
Devin Buhl a855b3024d fix: set rounds to 10 on weave password 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-05 08:21:17 -04:00
Devin Buhl fd1590efcc fix: actually deploy custom-cilium-l2.yaml.j2 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 18:00:15 -04:00
Devin Buhl b0b54b31b0 fix: use fqcrdname for resource readiness 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:57:13 -04:00
Devin Buhl dbf7d878e9 fix: check for the existence of cloudflared 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:40:06 -04:00
Devin Buhl c95911eed4 fix: use shell instead of command when checking for CLI tools 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:37:37 -04:00
Devin Buhl 315659d196 chore: update requirements and stale container service 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:24:31 -04:00
Devin Buhl 46d68b8d95 feat(ansible): Deploy coredns with HelmChart instead of builtin method and other small QoL changes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-03 11:30:13 -04:00
Devin Buhl 1be064692d feat: Keep kube-vip-rbac and delete stale addon resources 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 17:56:29 -04:00
Devin Buhl 6442ac02cf feat(ansible): remove dep cilium-cli and update nuke playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 11:33:54 -04:00
Devin Buhl a15dd621c4 chore: remove comments on swapping certs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-29 12:32:17 -04:00
Devin Buhl d7f1a8b2a7 feat: add ingress-nginx to dependencies for certain HRs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 09:08:33 -04:00
Devin Buhl c1c42b9d7d chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:30:58 -04:00
Devin Buhl 9db93aeda5 chore: github syntax highlighting for jinja yaml files 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:20:51 -04:00
Devin Buhl 54f30d1d99 fix: include jinja template in renovate matches 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:18:46 -04:00
Devin Buhl adf08cb348 fix: renovate the k3s cilium helm chart 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:13:42 -04:00
Devin Buhl 746f49e028 fix(ansible): only run certain tasks on k3s_primary_control_node 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 07:48:59 -04:00
Devin Buhl a489ca1159 feat: use the staging lets encrypt certificate by default to prevent being rate limited 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-15 15:44:49 -04:00
Devin Buhl e380868795 fix: only force delete Cilium HelmChart if it exists 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-15 15:09:51 -04:00