infra/home-cluster
2
0 Fork 0
Code Issues Pull Requests 40 Actions Packages Projects Releases Wiki Activity
686 Commits 41 Branches 0 Tags
ff3ae2646fbf472d39623ec4487956e5cbb99b85
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Devin Buhl cdea056ca2 fix: add tflint to configure verify 2022-07-25 21:47:41 -04:00
Devin Buhl d41a82c572 fix: add tflint to brew install 2022-07-25 21:45:56 -04:00
Devin Buhl 8763fadb74 fix: add rebootSentinelCommand to kured for fedora (split on new line) 2022-07-25 16:25:00 -04:00
Devin Buhl 51c33bc113 fix: add rebootSentinelCommand to kured for fedora 2022-07-25 16:24:19 -04:00
Devin Buhl 2d8fcb6e10 fix: use ghcr for flux images 2022-07-20 08:03:09 -04:00
Devin Buhl 0c6c66ce85 chore(readme): add reading material section 2022-07-17 08:41:16 -04:00
Devin Buhl f80ab355b0 fix: patch out the flux netpols 2022-07-16 18:55:18 -04:00
Devin Buhl 2313461f93 fix: update resources in receiver 2022-07-12 09:09:16 -04:00
Devin Buhl 650b8a8810 fix(ansible): set remote_tmp to /tmp 2022-07-12 09:07:31 -04:00
Devin Buhl 3c8568bc3c chore: update readme 2022-07-09 06:57:35 -04:00
Devin Buhl 6a758ee101 feat!: replace traefik with nginx ingress (#388) 
* feat: remove traefik crds

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in config sample env

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in configure

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in cluster-settings

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change variable names in configure

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: change README.md to ingress-nginx

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove traefik helm release

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove traefik helm repo

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove error-pages

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: remove other traefik references

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add ingress-nginx helm repo

Signed-off-by: Devin Buhl <devin@buhl.casa>

* feat: add ingress-nginx helm release

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2022-07-07 09:51:41 -04:00
Devin Buhl 8091656c05 fix: actually deploy metallb 2022-06-19 12:55:34 -04:00
Devin Buhl ad529970c8 fix: there is no metallb system ns 2022-06-19 12:50:48 -04:00
Devin Buhl 2a3d7d6fa5 fix: secret is in core for cert manager 2022-06-19 12:48:17 -04:00
Devin Buhl 4969c53367 fix: remove namespace.yaml from cert-manager kustomization 2022-06-19 09:56:12 -04:00
Devin Buhl 7f375f1ad7 chore: add cert-manager renovate group 2022-06-19 08:27:52 -04:00
Devin Buhl 9fd26ad08d fix: traefik crds 2022-06-19 06:07:52 -04:00
Devin Buhl 84cbe4e596 fix: cluster issuers path 2022-06-18 16:24:17 -04:00
Devin Buhl 99aea49bdf fix: set external-dns interval back to 5m 2022-06-17 14:41:25 -04:00
Devin Buhl 0eb89d9eee fix(echo-server): use the correct tls options 2022-06-13 10:53:21 -04:00
Devin Buhl 8704ca93e1 fix(cluster): echo-server indentation 2022-06-11 21:06:31 -04:00
Devin Buhl 1db1872de1 fix: remove extra quotes around metallb traefik annotation 2022-06-11 17:04:11 -04:00
Devin Buhl 283ec2f52c fix: stakater-charts helm URL 2022-06-10 18:08:08 -04:00
Devin Buhl 57c32173e9 fix(configure): update sops encrypt to point to cluster/config 2022-06-10 12:46:25 -04:00
Devin Buhl e7d8409bd7 feat: use key_groups in sops configuration file 2022-06-08 09:01:01 -04:00
Devin Buhl 63e29a7257 feat(kube-vip)!: Use auto detection of kube-vip interface (#331) 
* Remove kube-vip interface config setting

* Remove kube-vip interface Ansible variable

* Remove kube-vip interface from cluster manifest

* Remove kube-vip interface from Ansible deployment

* Delete checks for consistent kube-vip interface names

* Remove checks task from Ansible role
 2022-05-22 23:15:51 -04:00
Devin Buhl 1fa16287e8 chore(README): Clean up provisioning tools section 2022-05-22 11:01:22 -04:00
Devin Buhl 3c276effd1 chore(README): mention arm64/amd64 nodes are supported 2022-05-22 10:56:12 -04:00
Devin Buhl 1363b755f4 fix: use github-deploy-key in gitignore 2022-05-16 18:20:11 -04:00
Devin Buhl 63d077e1dd feat(cluster): add error-pages (#207) 2022-05-13 14:03:25 -04:00
Devin Buhl 141f6ad107 fix: add cloudflare-only middleware to webhook ingress 2022-05-10 22:01:29 -04:00
Devin Buhl 08b05b0e31 chore: add another verification step 2022-05-07 05:02:16 -04:00
Devin Buhl 043c345373 chore: mention exception for var substitution 2022-05-06 11:37:17 -04:00
Devin Buhl cd8b55ec9a chore: change emoji symbol on nuke task 2022-05-06 11:33:08 -04:00
Devin Buhl d3806d3905 chore: add notes about the ansible:nuke task 2022-05-06 11:30:48 -04:00
Devin Buhl c4a3486c25 fix(ansible): delete ubuntu-upgrade playbook 2022-05-06 10:42:39 -04:00
Devin Buhl 9591c3feb6 fix(ansible): use full find ansible task cmd 2022-05-06 10:42:01 -04:00
Devin Buhl 65c8e27101 fix(cluster): set flux gitrepo default interval to 5m0s 2022-05-06 09:20:33 -04:00
Devin Buhl e7f9355747 fix: log a reason for possible ssh failure 2022-05-05 17:41:00 -04:00
Devin Buhl 2f7a222e84 fix(cluster): enable cloudflare proxy on github webhook 2022-05-03 12:15:32 -04:00
Devin Buhl ad110e3597 fix(ansible): add rbd module back in 
This was not working on raspi devices because without the linux-modules-extra-raspi package it would fail.
 2022-05-03 04:41:06 -04:00
Devin Buhl d10800e962 fix(ansible): add logic back to install pi specific package 2022-05-03 04:36:30 -04:00
Devin Buhl 13f47df96a fix(ansible): remove modprobe rbd from kernel task 
This will fail on raspberry pis and were not installing rookceph so it's not needed.
 2022-05-03 04:09:03 -04:00
Devin Buhl 375d41d313 fix(ansible): removed linux-modules-extra-raspi due to breakage 2022-05-01 08:13:45 -04:00
Devin Buhl ee82ff6bc5 chore: add note about enabling system upgrade controller 2022-04-30 11:28:20 -04:00
Devin Buhl faa3f03fbf chore: add note to readme on enabling renovatebot 2022-04-30 11:11:40 -04:00
Devin Buhl a0dcf7e242 chore: add note about SUC being opt-in 2022-04-28 17:41:11 -04:00
Devin Buhl f5710e3fd5 feat! make SUC opt-in 
SUC can cause issues when people are bootstrapping new clusters and there's a newer k3s version available. This can cause the cluster to fail or become unresponsive. This should be enabled with caution.

If you want to enable this, make sure you build your cluster with the latest k3s version set in the Ansible vars.
 2022-04-28 17:35:18 -04:00
Devin Buhl 3f0cd41151 feat(ansible)!: set sysctls for kubernetes 
This file is renamed from 99-kubernetes-cri.conf to 99-kubernetes.conf and also includes disabling rp_filter
https://github.com/charmed-kubernetes/layer-kubernetes-node-base/pull/2
 2022-04-28 15:35:05 -04:00
Devin Buhl b92dda91f5 chore: update docs to mention cloud providers and multi masters 2022-04-28 08:41:52 -04:00
Devin Buhl be8ef2dc77 chore: ubuntu 22.04 🎉 2022-04-27 12:33:55 -04:00
Devin Buhl 6c844dacdd fix: upgrade calico to 3.22 2022-04-16 13:21:29 -04:00
Devin Buhl 3841e8d962 fix: update feature flags on k3s worker nodes 2022-04-16 08:51:02 -04:00
Devin Buhl 1113058e7e fix: update feature flags on k3s masters 2022-04-16 08:50:34 -04:00
Devin Buhl 840450363f chore: more readme changes on DNS 2022-04-16 00:41:05 -04:00
Devin Buhl 82d769dffb chore: update readme on external-dns 2022-04-16 00:35:25 -04:00
Devin Buhl 6cbfd7cb9c feat: add external-dns for managing public DNS records (#288) 2022-04-16 00:04:38 -04:00
Devin Buhl c62dcbe8da feat: add k8s_gateway for accessing ingresses locally over DNS (#287) 2022-04-15 23:21:26 -04:00
Devin Buhl c582c24d98 fix(renovate): update regexmanagers 2022-04-11 17:49:40 -04:00
Devin Buhl e88a2260c5 fix: schedule on weekends 2022-03-25 15:31:39 -04:00
Devin Buhl 517380d4c8 fix: indentation issue in kube vip ds 2022-03-12 16:04:18 -05:00
Devin Buhl 26b42a32d1 fix: indentation in kube vip ds 2022-03-12 16:02:34 -05:00
Devin Buhl 64cd7f8457 chore: hajimari check after flux 2022-03-04 22:46:40 -05:00
Devin Buhl 996df6c0b5 fix: delete unused config pvc from echo server kustomization 2022-02-26 06:26:01 -05:00
Devin Buhl 6ffae7a77b fix(cluster): update server plan to 1.23 channel 2022-02-13 08:43:24 -05:00
Devin Buhl eef6151373 fix(cluster): update agent plan to 1.23 channel 2022-02-13 08:43:09 -05:00
Devin Buhl 1b07a09520 fix(ansible): bump k3s to v1.23.3+k3s1 2022-02-13 08:42:27 -05:00
Devin Buhl 3c75be1efb chore(docs): mention reflector in README 2022-02-11 17:00:00 -05:00
Devin Buhl 84c2c805dc fix(renovate): add flux controllers to ignoreDeps 2022-02-07 17:40:28 -05:00
Devin Buhl 85a26f67fc chore: add single control plane note in readme 2022-02-03 11:32:22 -05:00
Devin Buhl df6b412661 fix: renovate would not work on helmreleases due to ignorePaths being to restrictive 2022-02-02 13:29:29 -05:00
Devin Buhl c37a8c37a1 fix: correct linters path in pre-commit-config 2022-02-02 13:26:13 -05:00
Devin Buhl 516098277a chore: mention port forwarding traefik svc IP 2022-01-31 12:03:12 -05:00
Devin Buhl 439767f7ab chore: update readme with gitleaks 2022-01-17 15:13:06 -05:00
Devin Buhl 73461c2877 feat: add gitleaks to pre-commit config 2022-01-17 15:10:49 -05:00
Devin Buhl 4b1d8def7b feat: add emberstack/reflector (#187) 2022-01-10 16:46:37 -05:00
Devin Buhl 088c1d9bcf chore: grammar 2022-01-08 15:07:08 -05:00
Devin Buhl 3b4fc11096 fix: change k3s_become_for_all to k3s_become 2022-01-03 16:06:55 -05:00
Devin Buhl 07389e156b fix: bump kubevip 0.4.1 2021-12-22 07:50:58 -05:00
Devin Buhl 2aa60f9d1d fix: bump k3s version to v1.22.4+k3s1 in ansible config 2021-12-06 10:26:54 -05:00
Devin Buhl 35d41ca8db feat: use age instead of gpg for sops (#153) 
* feat: use age instead of gpg

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: update comment in config env

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: set some debug output in configure.sh

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: use /Users/devin instead of full path

Signed-off-by: Devin Buhl <devin@buhl.casa>

* fix: check if BOOTSTRAP_AGE_PUBLIC_KEY starts with age

Signed-off-by: Devin Buhl <devin@buhl.casa>
 2021-11-25 07:34:46 -05:00
Devin Buhl f93f16b468 feat: Bump k3s to v1.22.x (#148) 2021-11-19 17:44:41 -05:00
Devin Buhl 3c16976813 feat: update calico to v3.21 
For people with existing clusters you should be able to upgrade with:

```
kubectl apply -f https://docs.projectcalico.org/archive/v3.21/manifests/tigera-operator.yaml
```
 2021-11-10 15:14:14 -05:00
Devin Buhl 8e1f68e198 fix: set namespace on hajimari pvc 2021-10-24 10:03:31 -04:00
Devin Buhl 823e3597cb fix: update traefik crds to kustomize.toolkit.fluxcd.io/v1beta2 2021-10-09 11:08:47 -04:00
Devin Buhl 1ce17d455f chore: document k3s worker configuation 2021-10-05 08:31:50 -04:00
Devin Buhl dbcac5042d chore: document k3s master vars 2021-10-05 08:31:21 -04:00
Devin Buhl 4bf2f2fbe0 feat: implement calico cni - too many problems with flannel (#94) 
Signed-off-by: Devin Buhl <devin.kray@gmail.com>
 2021-10-03 16:58:30 -04:00
Devin Buhl 712b8a166e chore: really fix terraform task names 2021-09-30 17:39:36 -04:00
Devin Buhl 3e47af54ab chore: update terraform task commands 2021-09-30 17:38:15 -04:00
Devin Buhl 7f406b8d39 feat: move kubeconfig to provision folder during ansible k3s-install (#91) 
* feat: move kubeconfig to provision folder during ansible k3s-install

Signed-off-by: Devin Buhl <devin.kray@gmail.com>

* fix: update kubeconfig refereces

Signed-off-by: Devin Buhl <devin.kray@gmail.com>
 2021-09-30 14:52:00 -04:00
Devin Buhl 4aa739eab4 fix: bump kube-vip version to v0.3.8 2021-09-29 05:38:07 -04:00
Devin Buhl ff11df3238 feat: only allow ips from cloudflare or rfc1918 2021-09-29 05:31:52 -04:00
Devin Buhl c5e0270d64 chore: ansible deps is higher up in readme 2021-09-28 16:50:45 -04:00
Devin Buhl ce67a3cead chore: one or more nodes can be used 2021-09-28 08:13:12 -04:00
Devin Buhl 8fa1ba2fc6 chore: update ansible notes 2021-09-28 07:56:45 -04:00
Devin Buhl 683942105e chore: be clear about cloudflare domain 2021-09-28 07:52:13 -04:00
Devin Buhl 8d5516a546 feat!: Use Ansible and Terraform to provision Nodes and DNS and create configure script (#84) 2021-09-27 11:24:55 -04:00
ᗪєνιη ᗷυнʟ 4455790fc6 fix: traefik dashboard ingress from not working 2021-09-16 20:53:13 -04:00
ᗪєνιη ᗷυнʟ f14fae318e chore: note about metallb arp range 2021-09-16 20:26:05 -04:00