2021-04-19 22:35:05 +07:00
|
|
|
# TODO
|
|
|
|
|
|
2021-05-01 15:39:10 +07:00
|
|
|
- [Apply LXD VMs in parallel github.com/](../infra/Makefile#L12)
|
|
|
|
|
- [(optimize) DRY master and worker definition](../infra/cluster.tf#L89)
|
|
|
|
|
- [(bug) should be posible to put it in the profile instead lxd_profile.kubenode.config, and make it a variable](../infra/cluster.tf#L100)
|
2021-05-01 22:42:58 +07:00
|
|
|
- [HA Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L82)
|
|
|
|
|
- [Auto unseal Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L83)
|
|
|
|
|
- [automatic ingress and tunnel for all services](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L86)
|
|
|
|
|
- [use metal values for MetalLB values](../infra/modules/kubernetes-cluster-bootstrap/values/metallb.yaml#L6)
|
2021-05-01 15:39:10 +07:00
|
|
|
- [Upgrade hosts kernel to use Wireguard in container](../infra/modules/vpn/main.tf#L15)
|
|
|
|
|
- [make parent interface a variable](../infra/modules/vpn/main.tf#L38)
|
2021-04-24 18:04:26 +07:00
|
|
|
- [Generate endpoint automatically (terragrunt for variable)](../infra/terraform.tf#L2)
|
2021-05-01 22:42:58 +07:00
|
|
|
- [Decide if VPN should be inside Kubernetes](../infra/vpn.tf#L1)
|
2021-04-19 23:15:14 +07:00
|
|
|
- [convert to YAML for Terraform yamldecode](../metal/hosts.ini#L1)
|
|
|
|
|
- [Optimize SELinux](../metal/roles/lxd/tasks/main.yml#L1)
|
|
|
|
|
- [Optimize firewall](../metal/roles/lxd/tasks/main.yml#L6)
|
|
|
|
|
- [change to /var/lib/lxd/server.crt after https](../metal/roles/lxd/tasks/main.yml#L26)
|
2021-04-21 23:37:59 +07:00
|
|
|
- [(optimize) use template for tfvars](../metal/roles/lxd/tasks/main.yml#L38)
|
2021-04-19 23:15:14 +07:00
|
|
|
- [use btrfs in k8s 1.19.8 https](../metal/roles/lxd/templates/leader.yaml.j2#L17)
|
2021-04-25 00:55:28 +07:00
|
|
|
- [enable etcd authentication and generate terraform backend config variables](../metal/roles/tfstate/tasks/main.yml#L43)
|
2021-04-21 23:37:59 +07:00
|
|
|
- [investigate why --noconfirm is not working](../tools/Dockerfile#L3)
|
