Commit Graph
100 Commits
Author SHA1 Message Date
Devin Buhl f9481d6202 feat: replace ansible templating with makejinja (#1156) 2024-01-14 23:03:02 -05:00
Devin Buhl a4731906d9 feat: set lstrip on ansible template task and remove comments (#1155)
* feat: set lstrip on ansible template task and remove comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: cert-manager block was neing stripped

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-14 17:08:59 -05:00
Devin Buhl ef44ea1b2b chore: add ci tests for k0s (#1152) 2024-01-14 12:11:39 -05:00
Devin Buhl 6428678fae fix: only remove duplicate metrics in kps if distro is k3s (#1151)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-14 09:32:41 -05:00
Devin Buhl 5ee8a8a2fa fix: remove l2 announcement from k3s role config 2024-01-13 21:48:09 -05:00
Devin Buhl a21cadb06f feat: update e2e test to account for testing ipv6 (#1150) 2024-01-13 20:30:12 -05:00
Devin Buhl c9630bf4b5 fix: update cluster-rollout-update to be k0s compatible (#1149)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-13 20:01:22 -05:00
Devin Buhl a6cb35fed2 chore: add emoji next to related projects in readme 2024-01-13 12:43:35 -05:00
Devin Buhl a7bbbcfb5e chore: forgot one instance of paru in the readme 2024-01-13 12:28:36 -05:00
Devin Buhl 3b1ea970b1 fix: Updates to taskfiles and e2e workflow (#1144) 2024-01-13 12:04:44 -05:00
Devin Buhl 0363af873e fix: do not limit e2e workflow on folder changed 2024-01-12 23:14:14 -05:00
Devin Buhl 2f9e6068d3 feat: attempt to add a e2e workflow (#1143)
* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: attempt to add a e2e workflow

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-12 22:41:03 -05:00
Devin Buhl e8772928e2 fix: update local path var in nuke playbook 2024-01-11 18:40:39 -05:00
Devin Buhl d83e14935c fix: task folder gitignore 2024-01-11 18:39:28 -05:00
Devin Buhl f7eda7f8ec fix: k0s reset task 2024-01-11 18:23:56 -05:00
Devin Buhl 9f5999eaac fix: PYTHON_BIN not being set 2024-01-11 18:23:20 -05:00
Devin Buhl 270f67ab8a fix: kube vip URL changed 2024-01-05 10:36:00 -05:00
Devin Buhl e167882e64 feat!: refactor namespaces and add descheduler (#1110)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-02 16:48:33 -05:00
Devin Buhl 2a70283539 add k9s to brew packages 2023-12-30 21:56:49 -05:00
Devin Buhl 4600467917 chore: add important note in github webhook section 2023-12-30 15:10:17 -05:00
Devin Buhl eb4832d01a chore: update the lychee workflow to be more smarter about finding the link checker issue 2023-12-24 14:41:06 -05:00
Devin Buhl a0bf578111 chore(ansible): clean up indentation 2023-12-21 12:00:49 -05:00
Devin Buhl bd2d784b0f fix(ansible): longhorn components are now a daemonset, no need to use the selector 2023-12-21 12:00:00 -05:00
Devin Buhl 429ef51c96 fix: missing name on cluster-rollout-update playbook 2023-12-11 17:57:30 -05:00
Devin Buhl ebaccf69bb chore: update bootstrap_cilium_loadbalancer_mode description comments 2023-12-11 17:45:10 -05:00
Devin Buhl a374c72887 fix: be a bit smarter when reloading kernel modules 2023-12-11 15:31:12 -05:00
Devin Buhl bf28fbaebf fix: instead of defining modules twice just restart the modules-load service 2023-12-11 15:14:17 -05:00
Devin Buhl 65bfe7a992 fix: ManageForeignRoutes is not needed anymore
https://github.com/cilium/cilium/pull/27208/
2023-12-11 14:56:28 -05:00
Devin Buhl 929fdbd1b5 fix: set permission for labeler workflow 2023-12-11 12:05:02 -05:00
Devin Buhl e504f6119d chore: add admonishes to readme 2023-12-10 09:04:54 -05:00
Devin Buhl 6547d8277e fix: downgrade bcrypt due to passlib issue 2023-12-03 13:58:55 -05:00
Devin Buhl b5ff534f06 fix: run kube-vip playbook one node at a time 2023-12-03 09:04:28 -05:00
Devin Buhl de6bf19acd chore: fix cf link in readme 2023-12-02 19:11:06 -05:00
Devin Buhl 7e8cb5b5e4 chore: add SUC group to renovate config 2023-12-01 20:20:43 -05:00
Devin Buhl 2a1e4a4a31 chore: add release file to exclude renovate from changelog 2023-12-01 08:08:05 -05:00
Devin Buhl fe56fa0653 chore: fix task prompt spelling 2023-11-29 11:17:36 -05:00
Devin Buhl ee81349379 chore: add a task prompt on task configure 2023-11-29 11:03:52 -05:00
Devin Buhl 14bba07cc5 chore: add ansible-lint 2023-11-29 10:15:53 -05:00
Devin Buhl 08cea788b0 chore: add k8s and ansible config to vscode settings 2023-11-29 10:14:01 -05:00
Devin Buhl 0f7623c40b chore: update required python version to 3.10+ 2023-11-27 21:15:42 -05:00
Devin Buhl ae22b649e4 fix: add tolerations back to suc server plan 2023-11-26 13:32:18 -05:00
Devin Buhl 924fa044b2 chore: update readme 2023-11-25 19:10:31 -05:00
Devin Buhl 8b23097e1e fix: templating error on volsync prom rules 2023-11-24 10:52:26 -05:00
Devin Buhl 84574b2f64 feat!: Update Flux ks names and add volsync and snapshot-controller (#1036) 2023-11-23 17:49:40 -05:00
Devin Buhl fc3c7b56af revert: "feat(k3s): enable encryption at rest and stargz snapshotter"
stargz broken
2023-11-22 22:16:21 -05:00
Devin Buhl fdff319d4f feat(k3s): enable encryption at rest and stargz snapshotter 2023-11-22 20:15:04 -05:00
Devin Buhl 30cccac0ce fix: remove dupe when 2023-11-22 19:52:39 -05:00
Devin Buhl 521b08de99 chore: englash is hard 2023-11-21 17:47:05 -05:00
Devin Buhl 787aed1db2 chore: add a pre-start checklist item 2023-11-21 17:40:40 -05:00
Devin Buhl f47987ccdf fix: remove experimental Flux Helm drift detection 2023-11-21 17:27:10 -05:00
Devin Buhl 3ab157eb23 Update README.md 2023-11-17 18:46:51 -05:00
Devin Buhl d0f4708027 fix: upgrade bootstrap prom crd versions 2023-11-12 10:25:34 -05:00
Devin Buhl ab25928398 fix: add back spec.[install|upgrade].crds: CreateReplace to kps helm release 2023-11-12 10:20:57 -05:00
Devin Buhl 3f4bbb8405 fix: use git source for k3s galaxy role 2023-11-04 10:48:45 -04:00
Devin Buhl ddb3915a07 fix: remove secret on k8s dashboard ingress 2023-10-07 17:53:01 -04:00
Devin Buhl abcd85a5b9 fix: remove default main.yaml 2023-09-19 12:07:09 +08:00
Devin Buhl 352ac7060b fix: enable post quantum in cloudflared 2023-09-02 16:33:49 -04:00
Devin Buhl 760f15439e fix: enable k8s api load balancing over ipvs in kube-vip 2023-08-30 08:01:45 -04:00
Devin Buhl b21d68a884 fix: add trustCRDsExist to cilium helmrelease 2023-08-15 12:14:05 -04:00
Devin Buhl adda5de03f chore: update renovate regexes 2023-08-13 13:11:15 -04:00
Devin Buhl d292d701ee chore: update readme 2023-08-08 08:44:02 -04:00
Devin Buhl 9a5f117518 chore: run apt update before installing sudo 2023-08-06 18:23:45 -04:00
Devin Buhl ff8eb5652f fix: change external ingress to NOT be default 2023-08-05 09:58:03 -04:00
Devin Buhl 377bdb3d72 feat!: Separate out internal and external nginx controllers (#880) 2023-07-31 13:40:35 -04:00
Devin Buhl 639fc37328 chore: remove accidental yaml schema comment 2023-07-29 06:53:09 -04:00
Devin Buhl 3c6f701b6a fix: update SUC kustomization due to kustomize build warnings 2023-07-29 06:51:46 -04:00
Devin Buhl 3813133196 chore: add mikestead.dotenv to vscode extensions 2023-07-26 18:00:05 -04:00
Devin Buhl 1a616bcff2 chore: add sops age key setting in vscode settings 2023-07-24 16:03:34 -04:00
Devin Buhl f3c019fcb1 fix: system-upgrade-controller renovate comment 2023-07-21 19:58:49 -04:00
Devin Buhl eae6d990ae chore: update renovate config 2023-07-21 19:56:32 -04:00
Devin Buhl e64793f367 chore: task certificatereq is part of certificates task 2023-07-20 15:43:07 -04:00
Devin Buhl e6cae4e699 fix(grafana): add ingress-nginx dashboard & update datasources 2023-07-20 11:31:41 -04:00
Devin Buhl 571a7454c0 refactor: install ansible with Python venv (#863) 2023-07-19 11:03:59 -04:00
Devin Buhl c48083ca6b fix: cloudflared brew package 2023-07-19 07:32:10 -04:00
Devin Buhl 3610c39a31 chore: phoneops readme changes 2023-07-18 23:09:34 -04:00
Devin Buhl f33054d57f chore: readme sops age key env is in direnv 2023-07-17 06:43:05 -04:00
Devin Buhl 253f033778 chore: readme refactoring (#850) 2023-07-16 13:25:58 -04:00
Devin Buhl 6dec8a4857 chore: mention ssh agent example in resent 2023-07-15 21:23:28 -04:00
Devin Buhl 40902d60ff fix: jinja2 comments needed for suc 2023-07-15 15:35:04 -04:00
Devin Buhl 48b5ed75b4 feat: enable cilium grafana dashboards 2023-07-14 17:45:22 -04:00
Devin Buhl c9d988a66f feat!: template all ansible dir and rename template to bootstrap (#847) 2023-07-12 11:44:23 -04:00
Devin Buhl 4a0facce65 chore: use pull_request_target on labeler 2023-07-08 19:54:53 -04:00
Devin Buhl 0b4f32bd7a feat: add csi-driver-nfs addon (#837) 2023-07-06 15:02:23 -04:00
Devin Buhl 34527bd3e2 feat(ansible): Add addon support (#836) 2023-07-06 14:21:32 -04:00
Devin Buhl fe41cf6ea5 feat: move kubernetes dir into templates to support jinja2 across all files (#831) 2023-07-05 21:17:10 -04:00
Devin Buhl 7b0a154fed fix(ansible): keep apparmor installed but mask the service
Also add task back in for updating `/etc/hosts` since hostname doesn't change this file
2023-07-05 18:49:18 -04:00
Devin Buhl 0df7ec6526 feat!: debian 12 to the moon (#830) 2023-07-05 10:36:05 -04:00
Devin Buhl 73bed06eba fix: use http2 for cloudflared 2023-07-05 03:59:42 -04:00
Devin Buhl 39643241f9 chore: use cmd in root taskfile 2023-07-04 20:21:11 -04:00
Devin Buhl 2f4b59c8aa fix: do not reboot twice when using taskfile to nuke 2023-07-04 20:01:39 -04:00
Devin Buhl 07eb228b34 feat: cluster rollout update playbook & use new cmd for taskfiles (#829) 2023-07-04 18:37:24 -04:00
Devin Buhl 9cd26e9d11 feat: manage the cilium l2 config with flux (#827)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2023-07-04 17:01:36 -04:00
Devin BuhlandManuel Rüger de0ed1c70a feat!: Rewrite configure script in ansible (#822)
* feat: smol changes

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat!: Rewrite configure script in ansible

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: add comment for real path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: verification is done

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: do not need net common

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up old comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: finish up ansible host generation and more

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: backup/restore sops config between tasks

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: clean up test comments

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use ansible template on template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update template/vars/config.sample.yaml

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* Update template/tasks/verify_cli.yaml

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore: update readme

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Update README.md

Co-authored-by: Manuel Rüger <manuel@rueg.eu>

* fix: move bcrypt logic to template

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: derp

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Manuel Rüger <manuel@rueg.eu>
2023-07-04 11:36:58 -04:00
Devin Buhl 467af18b0f feat!: Drop Metallb in favor of Cilium L2Announcements (#821) 2023-07-03 14:47:51 -04:00
Devin Buhl 4905990750 fix(ansible): forgot to rename this file 2023-07-03 13:11:29 -04:00
Devin Buhl 3dcec5faaa feat(ansible): Add stale container weekly systemd timer 2023-07-01 11:18:25 -04:00
Devin Buhl 8d67a5988b fix: do not manage Foreign Routes or Foreign Routing Rules 2023-07-01 08:09:02 -04:00
Devin Buhl 635113c9f6 feat: remove pre-commit from template (#810) 2023-06-30 09:09:53 -04:00
Devin Buhl 5a531b1d15 fix: set grafana deploymentStrategy to Recreate 2023-06-29 18:03:53 -04:00
Devin Buhl 260aefc5d0 chore: Update README.md 2023-06-29 12:40:17 -04:00