lino/k3s-ansible
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
110 Commits 5 Branches 4 Tags
a12b6e6c7f09e6ee512be8277cfb863d23b3f731
Commit Graph

54 Commits

Author SHA1 Message Date
Lino Silva a12b6e6c7f feat: Immich 2023-03-26 23:26:13 +01:00
Lino Silva 0ad4fd3945 fix: Enable ssh 2023-03-26 15:51:28 +01:00
Lino Silva a43c1593d9 feat: Buncha shit 2023-03-25 23:54:00 +00:00
Lino Silva fe17c6eb69 feat: Swag with reverse proxy for most services 2023-03-20 23:16:16 +00:00
Lino Silva cfecd0afd8 feat: Add swag container 2023-03-20 14:56:20 +00:00
Lino Silva fbd6e53083 feat: added argocd and arr 2023-02-13 14:58:21 +00:00
Lino Silva 5fab069837 feat: Authentik, forward auth proxy 2023-02-09 23:03:36 +00:00
Lino Silva acd49ed5d8 feat: Shit, multiple things 2023-01-31 15:37:13 +00:00
Lino Silva 51400d260b feat: Frigate db mountpoint on NFS 2023-01-04 10:23:22 +00:00
Lino Silva c9c9861a82 feat: changed lxc to vm in k3s 2023-01-03 12:00:52 +00:00
lino 1913d6417c Updated frigate playbooks 2023-01-03 11:58:31 +00:00
lino 508e433bab feat: Frigate 
Co-authored-by: Lino Silva <lino.silva@farfetch.com>
Reviewed-on: #1
 2022-11-25 23:29:38 +00:00
Lino Silva 5075a3e697 Add TODO and pre-commit hook 2022-11-20 00:05:51 +00:00
Lino Silva b27354241d feat: reverse proxy and certs working 2022-11-19 23:42:06 +00:00
Lino Silva 645dacdca4 feat: Added k3s, metallb, tried adding traefik 2022-11-15 09:35:05 +00:00
lino f783d35513 Added pre-role for k3s and frigate 2022-11-10 21:01:15 +00:00
Lino Silva 6753d614ee k3s lxc playbook done 2022-11-07 21:18:02 +00:00
Irakli Nadareishvili 590a8029fd Removing accidental tear-down step that is clearly a typo (#117) 
Co-authored-by: Techno Tim <timothystewart6@gmail.com>
 2022-10-15 14:15:25 -05:00
Techno Tim cb2fa7c441 k3s, metallb, kube-vip updates (#119) 
* feat(k3s): Updated to v1.24.6+k3s1

* feat(kube-vip): Update to v0.5.5

* feat(metal-lb): Update to v0.13.6

* fix(pip): Freeze requirements

* fix(lint): Fixed ansible-lint
 2022-10-15 12:23:50 -05:00
Ioannis Angelakopoulos cd76fa05a7 fix master taint implementation - linting problems (#95) 
* add virtual-ip to certificate SAN entries

Adds the kube-vip IP as a Subject Alternative Name in the TLS cert. It is needed otherwise you cannot access the cluster.

* fixes bug with master taints (#1)

- improves taint logic

* fixes typo

* fixes formatting

* fixes undefined group['node'] if missing from hosts.ini (#2)

* fixes undefined group['node'] if missing from hosts.ini

- improves application of master taint by centralizing code

* improves molecule testing, fixes linting

* hacking at linter problems, small tweaks

- increases the metallb timeout error due to intermittent testing errors in GitHub actions

* improves context by renaming taint variable

- makes variable boolean

* fix bug

* removes linting hacks

Co-authored-by: Ioannis Angelakopoulos <ioangel@gmail.com>
 2022-09-24 20:12:24 -05:00
Simon Leiner d5b37acd8a Drop support for CentOS, test Rocky and Debian in CI (#92) 
* Test CentOS 7 in CI

* Drop support for CentOS, test on Rocky and Debian

* Fix reset playbook for Rocky Linux

* Fix typo

* Disable firewalld during testing

Co-authored-by: Techno Tim <timothystewart6@gmail.com>
 2022-09-24 05:10:55 +00:00
Simon Leiner 5225493ca0 CI: Fix linting job for ansible-lint 6.6.0 (#96) 
* CI: Fix linting job for ansible-lint 6.6.0

* Increase MetalLB timeout to mitigate CI flakiness
 2022-09-23 23:28:21 -05:00
BMeach 4acbe91b6c Fix master node taints in multi node installs (#93) 
* Taint master nodes if more than one node

* Kick off fork workflow tests

Co-authored-by: Techno Tim <timothystewart6@gmail.com>
 2022-09-17 15:56:09 -05:00
Simon Leiner a1ef590442 Add support for API servers on IPv6 addresses (#48) 
* Remove duplicate file for deletion

* Add support for IPv6 clusters

To correctly escape IPv6 addresses when ports are used, they must be
wrapped in square brackets [1]. This patch adds support for that,
using Ansible's ipwrap filter [2].

[1]: https://datatracker.ietf.org/doc/html/rfc4038#section-5.1
[2]: http://docs.ansible.com/ansible/latest/collections/ansible/utils/docsite/filters_ipaddr.html#wrapping-ipv6-addresses-in-brackets

* Do not abort other molecule jobs on failure

* Fix cache keys for Vagrant boxes

* Molecule: Derive overrides.yml location from scenario dir

# Conflicts:
#	molecule/default/molecule.yml
#	molecule/ipv6/molecule.yml
 2022-09-10 12:57:38 -05:00
Techno Tim b1df9663fa fix(ansible): Fix group permissions on tmp folder (#77) 2022-09-09 03:00:54 +00:00
Vitalij Dovhanyc 58c3a61bbb add editorconfig and fix trailing whitespaces (#68) 
Co-authored-by: Techno Tim <timothystewart6@gmail.com>
 2022-09-07 20:00:13 -05:00
Simon Leiner 60bc09b085 Mitigate CI flakiness (#70) 
* Increase SSH connection timeouts and retries

* Make MetalLB timeouts configurable

* Retry applying MetalLB CRs

* Fix location of MetalLB CRs template

* Make MetalLB wait logic more compact

* Fix typo

* retrigger 1

* retrigger 2

* retrigger 3

* retrigger 4

* retrigger 5
 2022-09-07 18:47:58 -05:00
Timothy Stewart 4365a2a54b fix(ansible): fixing permissions on tmp folder 2022-09-06 19:07:09 -05:00
Simon Leiner a6b2a95b7e Test playbook using molecule (#67) 
* Test cluster using molecule

* Fix detection of first control node

* Include --flannel-iface and --node-ip as k3s arguments

* Store logs of k3s-init.service as GitHub job artifacts
 2022-09-03 10:36:28 -05:00
Timothy Stewart 3c36dc8bfd fix(ansible): use k3s kubectl 2022-09-02 11:07:17 -05:00
Techno Tim 6695d13683 upgrade k3s to v1.24.4+k3s1 (#64) 
* feat(k3s): Upgrade to v1.24.4+k3s1
* feat(metallb): updated to v0.13.5
 2022-09-01 21:20:25 -05:00
Techno Tim 56f8f21850 fix(ansible): Install services separate from config (#63) 2022-08-30 21:44:55 -05:00
Timothy Stewart 117c608a73 fix(ansible): added longer wait with todo 2022-08-29 23:16:13 -05:00
Techno Tim 2296959894 fix(ci): Fix Linting (#61) 2022-08-28 20:36:05 -05:00
Timothy Stewart 6d793c5c96 fix(ansible): add wait 2022-08-28 17:49:38 -05:00
Timothy Stewart 47ac514dc6 fix(ansible): fix lint 2022-08-28 16:42:07 -05:00
Timothy Stewart 611cf5ab0b fix(ansible): fix lint 2022-08-28 16:32:52 -05:00
Timothy Stewart c82cbfc501 fix(ansible): fix lint 2022-08-28 16:29:04 -05:00
Timothy Stewart f603a048c3 fix(ansible): fix lint 2022-08-28 16:26:46 -05:00
Timothy Stewart 4b959719ba fix(ansible): run task on one master 2022-08-28 16:00:10 -05:00
Timothy Stewart db8fbd9447 chore(lint): Fix yaml lint 2022-08-28 14:27:22 -05:00
Techno Tim aa05ab153e fix(ansible): Refactored ansible steps to now install metallb in post… (#58) 
* fix(ansible): Refactored ansible steps to now install metallb in post task and verify
 2022-08-28 14:25:09 -05:00
Simon Leiner 370e19169b Print fewer logs when removing manifests (#55) 2022-08-23 23:26:08 -05:00
Techno Tim cdd7c4e668 Fix k3s manifest (#53) 
* fix(k3s): Remove manifests and folders from bootstrapped cluster
 2022-08-20 16:19:20 -05:00
Lance A. Brown 90bbc0a399 Add linux-modules-extra-raspi package for Ubuntu 22.x on Raspberry. (#50) 
* Add task for linux-modules-extra-raspi

Ubuntu 22.x on Raspberry Pi needs the linux-modules-extra-raspi package
for the vxlans kernel module.

* Remove linux-modules-extra-reaspi package

Not sure we want to do this but including it in the PR anyway for discussion.
 2022-08-11 21:23:56 -05:00
Timothy Stewart ac5325a670 fix(kube-vip): Cleaning up; adding missing rbac api groups 2022-07-30 22:11:28 -05:00
Techno Tim a33ed487e0 feat(upgrades): Updated k3s, metalls, and kubevip and fixed bugs (#46) 2022-07-27 23:13:43 -05:00
SwaggaRitz 39581f4ba7 Replaced manifest files with double extention to '-' (#41) 
Co-authored-by: Adrian Jones <adrian@geektowers.local>
 2022-07-27 21:21:38 -05:00
Techno Tim e1a0298eb8 Upgrade kube-vpi; improve settings; better reset (#31) 
* fix(k3s): upgrade k3s + kube-vip

* chore(github): update template

* chore(docs): Updated README

* fix(ansible): Reboot as part of reset

* fix(kube-vip): improve settings

* chore(lint): fix

* chore(lint): fix
 2022-05-26 15:32:25 -05:00
Janic Voser 1ce3319087 Using Ansible os family instead of multiple Ansible os distributions (#6) 
* Using Ansible os family instead of multiple Ansible os distributions

* Added option to set timezone, this could save a bit of headache if someone has certificate problems

Co-authored-by: janic <janic.voser@schulen-unteraegeri.ch>
 2022-04-09 11:04:25 -05:00