infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
1,203 Commits 41 Branches 0 Tags
fd1590efcc8644394fbab24098cd7a595ffce267
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl fd1590efcc fix: actually deploy custom-cilium-l2.yaml.j2 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 18:00:15 -04:00
Devin Buhl b0b54b31b0 fix: use fqcrdname for resource readiness 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:57:13 -04:00
Devin Buhl dbf7d878e9 fix: check for the existence of cloudflared 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:40:06 -04:00
Devin Buhl c95911eed4 fix: use shell instead of command when checking for CLI tools 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:37:37 -04:00
Devin Buhl 315659d196 chore: update requirements and stale container service 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-04 15:24:31 -04:00
Devin Buhl 46d68b8d95 feat(ansible): Deploy coredns with HelmChart instead of builtin method and other small QoL changes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-03 11:30:13 -04:00
Devin Buhl 1be064692d feat: Keep kube-vip-rbac and delete stale addon resources 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 17:56:29 -04:00
Devin Buhl 6442ac02cf feat(ansible): remove dep cilium-cli and update nuke playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-07-01 11:33:54 -04:00
Devin Buhl a15dd621c4 chore: remove comments on swapping certs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-29 12:32:17 -04:00
Devin Buhl d7f1a8b2a7 feat: add ingress-nginx to dependencies for certain HRs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 09:08:33 -04:00
Devin Buhl c1c42b9d7d chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:30:58 -04:00
Devin Buhl 9db93aeda5 chore: github syntax highlighting for jinja yaml files 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:20:51 -04:00
Devin Buhl 54f30d1d99 fix: include jinja template in renovate matches 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:18:46 -04:00
Devin Buhl adf08cb348 fix: renovate the k3s cilium helm chart 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 08:13:42 -04:00
Devin Buhl 746f49e028 fix(ansible): only run certain tasks on k3s_primary_control_node 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-17 07:48:59 -04:00
Devin Buhl a489ca1159 feat: use the staging lets encrypt certificate by default to prevent being rate limited 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-15 15:44:49 -04:00
Devin Buhl e380868795 fix: only force delete Cilium HelmChart if it exists 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-15 15:09:51 -04:00
Devin Buhl 9576fb7b43 chore: remove release cron workflow and only do manual releases 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-10 20:22:50 -04:00
Devin Buhl b20bb7492b fix: only use one secret for weave-gitops and make README more clear on usage 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-08 08:00:05 -04:00
Devin Buhl d0fd43da93 fix: remove whitelist-source-range annotations - not needed with cloudflared 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-06-08 07:28:38 -04:00
Devin Buhl 55b3bdd94f chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-31 07:46:00 -04:00
Devin Buhl c72fa3be60 chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-30 22:53:49 -04:00
Devin Buhl 8db5c1abcd fix: add playbook to upgrade kube-vip 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-30 17:00:55 -04:00
Devin Buhl 7a54ce1a0f fix: add cilium-cli to prepare playbook and cilium uninstall to nuke playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-30 15:10:14 -04:00
Devin Buhl d00d962fad fix: add cilium-cli to list of local required tools 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-30 13:44:30 -04:00
Devin Buhl 0d03b598b7 fix: allow cilium HelmChart to be renovated 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-29 20:39:03 -04:00
Devin Buhl 4a339148fc chore: Clean up comments and calico references and rename kube-vip.yml to supplemental.yml 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-29 10:19:17 -04:00
Devin Buhl 00798e85e8 feat: always delete custom- prefixed files from k3s_server_manifests_dir 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-27 08:21:29 -04:00
Devin Buhl be7860d204 fix: use OCI helm for bitnami, bjw-s and weave-gitops 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-26 17:33:01 -04:00
Devin Buhl 60e83ed9fa fix: adjust flux ks timeouts 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-13 18:40:00 -04:00
Devin Buhl dc7f33187c fix: cloudflared does not need to depend on ingress-nginx 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-09 08:39:33 -04:00
Devin Buhl 64c499c645 feat: use wait instead of healthchecks and lower timings on flux ks 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-09 08:22:15 -04:00
Devin Buhl 3c0cefe264 fix: prefix custom manifests with custom- and bump prom operator crd versions 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-08 15:08:56 -04:00
Devin Buhl 399f686279 fix: use ingress subdomain instead of ipv4 to better reflect usage 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-05-05 13:19:38 -04:00
Devin Buhl db931b5d7a chore: add renovate schemas to configs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-03-21 10:28:31 -04:00
Devin Buhl 1b05d46d1b chore: add flux renovate group 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-03-21 10:27:25 -04:00
Devin Buhl bd4a57ace4 chore: add common debugging section in readme - smol tweaks 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-02-03 17:58:31 -05:00
Devin Buhl f91c262b01 chore: add common debugging section in readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-02-03 17:51:38 -05:00
Devin Buhl 34e0e06110 chore: update readme to fix external-dns namespace 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-31 09:47:11 -05:00
Devin Buhl 8a0c4ab46b chore(update): readme to reflect annotation change 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-31 09:43:54 -05:00
Devin Buhl b6b79b1ccc feat!: use external-dns.alpha.kubernetes.io/target annotation filter in external-dns 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-31 09:41:38 -05:00
Devin Buhl 3f73334617 feat: switch substitution.flux.home.arpa label to be enabled by default 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-30 13:46:20 -05:00
Devin Buhl d789f7b584 fix: disable flux var substitution on local-path-provisioner 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-30 11:05:46 -05:00
Devin Buhl 924e165212 feat: upgrade to k3s v1.26.0+k3s2 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-20 23:51:11 -05:00
Devin Buhl 95207dac1e chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-13 20:54:16 -05:00
Devin Buhl 7a7107d4bf chore: use ROOT_DIR for taskfiles 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-13 17:07:06 -05:00
Devin Buhl d764022847 feat: Yall have spoken, wildcard certs are now a thing 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-12 08:55:55 -05:00
Devin Buhl 0749f94703 chore: remove yaml schema annotations 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-11 14:57:15 -05:00
Devin Buhl 4a50941cee feat: install local-path-provisioner with flux/helmrelease instead of k3s options 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-11 14:55:29 -05:00
Devin Buhl 814ad434d5 fix: update manifests names in ansible 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-11 14:45:45 -05:00
Devin Buhl 3b0ca9ff53 chore: housekeeping 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-10 20:25:14 -05:00
Devin Buhl 2ae3bc7cba fix: add pip3 docs and use pip3 to install the openshift lib 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-09 14:50:46 -05:00
Devin Buhl 303aab7e77 fix: set reboottimeout to 1 hour 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-09 14:33:26 -05:00
Devin Buhl 0e4bf5d499 feat: add cluster-rollout-reboot playbook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-09 13:41:01 -05:00
Devin Buhl 0538d4bcb5 fix: logging github webook and weave gitops secrets is fine for now 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-05 10:45:31 -05:00
Devin Buhl ff836aa469 feat: redact secrets in verify output 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-05 10:43:47 -05:00
Devin Buhl 358e97a391 feat: verify master nodes exist and not an even number 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-05 10:09:19 -05:00
Devin Buhl f08baaf5f9 chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-05 09:04:30 -05:00
Devin Buhl 71bbebda9e chore: update readme 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-05 08:59:16 -05:00
Devin Buhl ef4b12e66a fix: update replicas to one across scaled apps 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-05 08:50:58 -05:00
Devin Buhl 8c9f8c0bd7 chore: add docs around direnv and environment 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-04 17:15:53 -05:00
Devin Buhl 096c936cc5 fix: remove intel-gpu-tools from os packages 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-04 16:42:12 -05:00
Devin Buhl 2b0c4762d3 fix: remove ricing patch that could make flux ks get overwhelmed 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-02 20:57:33 -05:00
Devin Buhl b0413fffe0 fix: use the name flux-webhook for ingress 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-01 20:03:21 -05:00
Devin Buhl 17a3fc3586 feat: include the kubernetes dashboard in the monitoring namespace 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2023-01-01 17:20:30 -05:00
Devin Buhl 73237942a0 fix: use the right annotations for external-dns and update flux/gitops dashboard ingresses 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-24 17:39:32 -05:00
Devin Buhl af17946ce5 chore: add workflow dispatch to release drafter 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-24 08:15:44 -05:00
Devin Buhl 039e1393bb chore: add community label and update link-checker label 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-24 08:13:24 -05:00
Devin Buhl 805b4bea10 chore: ghcr is default in flux manifests 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-23 21:20:48 -05:00
Devin Buhl 64c8f52006 fix: make sure to add var subst in child flux ks 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-23 21:20:26 -05:00
Devin Buhl 8213cd4ae2 chore: add lycheeignore file 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-23 13:47:58 -05:00
Devin Buhl 28e280a3de chore: tweak link check workflow and renovate config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-23 13:47:37 -05:00
Devin Buhl 457d6b0427 chore: add editorconfig to vscode extension 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-22 16:20:24 -05:00
Devin Buhl 1ba4751a24 chore: update renovate config 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 16:24:44 -05:00
Devin Buhl b0538cc1a1 chore: add link checker github workflow 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 16:16:06 -05:00
Devin Buhl f7231ba28d chore: add checkout back to label sync 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 16:10:29 -05:00
Devin Buhl ac217e8a46 chore: Add meta workflows 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 16:06:42 -05:00
Devin Buhl 8ff79eeded chore: quotes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 14:42:18 -05:00
Devin Buhl 20695cd9af chore: include note about alphanumeric characters and dashes 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 14:33:55 -05:00
Devin Buhl af24d3988e chore: kubernetes is now the cluster directory 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 14:28:47 -05:00
Devin Buhl 9cf356e8c4 chore: remove mention of sops pre-commit hook 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-21 14:26:29 -05:00
Devin Buhl 8a257b07af feat: Move webhooks to add-ons directory 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-16 17:02:50 -05:00
Devin Buhl 1134b2927b feat: Remove option to disable kube-vip 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-12-15 18:47:40 -05:00
Devin Buhl 993757ef9d chore: Update paths in README.md 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-11-29 10:23:35 -05:00
Devin Buhl e986357982 chore: Add dot slash to most kustomizations and swap sops pre-commit hook to onedr0p 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-11-29 09:58:08 -05:00
Devin Buhl ebf643bb08 fix: Update networking namespace reference to kube-system in tmpl dir 2022-11-29 09:33:27 -05:00
Devin Buhl a02508afae fix: Try to catch incompatible sops and yq versions 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-11-29 09:28:49 -05:00
Devin Buhl 17bae3c1a2 feat!: Move networking apps into kube-system namespace 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-11-29 09:19:57 -05:00
Devin Buhl 8f77b5e2b4 feat!: Remove charts and config fluxtomizations and include them in the cluster/flux/ dir 2022-11-29 09:12:24 -05:00
Devin Buhl de61c22c37 feat!: Remove core and crds fluxtomizations and use raw helm chart to install CRs 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-10-19 15:07:03 -04:00
Devin Buhl 0095369a33 feat: use new chart filenames and switch to new kured helm repo 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-09-20 13:25:20 -04:00
Devin Buhl b1ef4985c3 chore: change references from k8s-at-home to onedr0p 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-08-25 17:37:48 -04:00
Devin Buhl e7f54dd7f1 fix: use the correct sourceRef for bjw-s charts 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-08-21 12:47:10 -04:00
Devin Buhl b45279ac57 feat: swap to bjw-s app-template and remove reflector 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-08-21 12:46:31 -04:00
Devin Buhl 75a3b12bdf feat: Enable system-upgrade-controller and pin k3s version 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-07-20 18:00:20 -04:00
Devin Buhl 686f31260a feat!: Swap to Fedora Server - See 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-07-07 18:27:01 -04:00
Devin Buhl 3f124cebc3 feat(cluster)!: move cert-manager into kube-system namespace 2022-06-19 07:33:18 -04:00
Devin Buhl ae0f007b0d feat: consistency in helmreleases 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-17 13:35:04 -04:00
Devin Buhl 4c72f6105d feat: only store cluster-issuers in core kustomization 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-17 13:32:54 -04:00
Devin Buhl fb5b38e7a8 feat: move namespaces defs into apps and utilize fluxcd.io/prune label 
Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-06-16 19:44:26 -04:00