Khue Doan
|
0ceb426cd5
|
fix(k3s): re-enable cloud controller manager
Otherwise the first node will use kube-vip's IP as its InternalIP,
causing issues with Kube API certificate due to an incorrect IP.
K3s's CCM does more than I thought, it not only handles Klipper LB but
also sets node InternalIP/ExternalIP and clears the uninitialized taint.
https://github.com/k3s-io/docs/blob/main/docs/networking.md#deploying-an-external-cloud-controller-manager
|
2024-01-18 17:48:31 +07:00 |
|
Khue Doan
|
376f0e1b92
|
perf(metal): tune some kernel params for Kubernetes
The default values are too low, you may get an error in some cases
after a while (like viewing logs)
|
2024-01-18 17:31:23 +07:00 |
|
Khue Doan
|
23f695b8fb
|
feat(k3s): install kube-vip for HA control plane
|
2024-01-16 12:34:22 +07:00 |
|
Khue Doan
|
d2dd44920f
|
refactor(cilium): disable Cilium Ingress
Missing some L7 features compare to NGINX.
|
2024-01-04 09:30:52 +07:00 |
|
Khue Doan
|
66a7ea04ce
|
fix(cilium): upgrade to v1.15 pre-release
For L2 Announcements bug fix, older version stops working after a
while.
|
2024-01-04 09:30:52 +07:00 |
|
Khue Doan
|
9f0d389abc
|
feat!: install Cilium
Installed using Ansible instead of ArgoCD because Cilium replaces
the default CNI, so ArgoCD pod cannot be scheduled before Cilium
is installed.
|
2023-12-22 00:31:16 +07:00 |
|
Khue Doan
|
7c0a784501
|
fix(k3s): move stargz config to all nodes
Instead of just master nodes.
|
2023-12-21 12:14:23 +07:00 |
|
Khue Doan
|
774e6086b4
|
perf(k3s): enable image lazy pulling with eStargz
Note that this is experimental.
https://docs.k3s.io/advanced#enabling-lazy-pulling-of-estargz-experimental
|
2023-11-19 12:11:13 +07:00 |
|
Khue Doan
|
f4ee4be035
|
chore(k3s): upgrade to Kubernetes 1.28
|
2023-11-19 12:00:52 +07:00 |
|
Khue Doan
|
a361fe3b57
|
chore(metal): update OS image to Fedora 39
|
2023-11-19 11:00:58 +07:00 |
|
Khue Doan
|
a5ecaafe50
|
refactor(metallb)!: use CRD instead of ConfigMap
Deprecated https://metallb.universe.tf/configuration/migration_to_crds
|
2023-05-19 11:54:07 +07:00 |
|
Khue Doan
|
fa6322d4f5
|
chore(k3s)!: upgrade to Kubernetes 1.27
|
2023-05-18 11:58:33 +07:00 |
|
Khue Doan
|
ed4ef0bac4
|
chore(metal): upgrade Fedora to version 38
|
2023-05-18 11:58:15 +07:00 |
|
Khue Doan
|
f3eda41596
|
chore(metal): upgrade to Fedora 37
|
2023-02-22 18:33:31 +07:00 |
|
Khue Doan
|
3aef027670
|
perf(metal): don't restart PXE server on every run
|
2023-02-22 18:33:17 +07:00 |
|
Khue Doan
|
6f7bff689a
|
fix(k3s): go back to v1.24
Longhorn does not support v1.25 yet
|
2022-12-29 10:32:42 +07:00 |
|
Khue Doan
|
8e54f134de
|
style(metal): clean up variable
Thanks to https://www.reddit.com/r/selfhosted/comments/s9otm7/comment/htqcwxn/?utm_source=share&utm_medium=web2x&context=3
|
2022-12-24 14:25:19 +07:00 |
|
Khue Doan
|
0e3394910c
|
chore(metal): upgrade to k3s 1.25
|
2022-12-24 14:23:17 +07:00 |
|
Khue Doan
|
2aa84b7b56
|
fix(metal): fix deprecated ipaddr and ipsubnet
|
2022-12-24 14:21:54 +07:00 |
|
Khue Doan
|
4bf068b7f6
|
fix(pxe): ensure the controller is running on a supported OS
|
2022-10-21 23:53:13 +07:00 |
|
Khue Doan
|
4ec027a1bc
|
perf(metal): install just OpenSSH server
Instead of the entire Headless Management group
|
2022-07-27 19:05:14 +07:00 |
|
Khue Doan
|
022b8169db
|
refactor(metal): migrate to Fedora 36 for newer packages (#73)
|
2022-07-20 22:49:12 +07:00 |
|
Bourne-ID
|
f650c894b0
|
refactor(pxe)!: combine dhcpd and tftpd to dnsmasq (#69)
* Add DNSMasq as an opt-in option
* Default to original
* Remove commented commands
* Remove dhcpd, replaced with dnsmasq
* Remove dhcpd, replaced with dnsmasq
* Move to dnsmasq
* dnsmasq output to stdout
* dnsmasq
* dnsmasq
* Remove unused code, update tag
* Correct title
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* Remove TFTP
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* rename to Dnsmasq
Moving to use proxy by default
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* Rename for consistency
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* Correct terminology
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* formatting
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* Additional logging
* proxy-by-default
* naming consistency
* naming consistency
* Revert Dnsmasq proxy ask
* proxy enabled by default
* naming consistency
* naming consistency
* Formatting
Co-authored-by: Robin Bourne <robin.bourne@onepeloton.com>
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
|
2022-07-18 01:39:02 +07:00 |
|
Khue Doan
|
3b0b934df4
|
fix(metal): disable root password login
https://github.com/khuedoan/homelab/issues/63
Rocky Linux 8.6 requires root password to be set
|
2022-06-08 20:27:28 +07:00 |
|
Khue Doan
|
d4189337a8
|
Revert "fix(metal): temporarily revert to Rocky Linux 8.5"
This reverts commit 0e1ff60b10 .
|
2022-06-08 20:27:12 +07:00 |
|
Khue Doan
|
0e1ff60b10
|
fix(metal): temporarily revert to Rocky Linux 8.5
|
2022-06-03 19:47:05 +07:00 |
|
Khue Doan
|
606c7ab46b
|
fix(metal): upgrade Rocky Linux to 8.6 and pin permanent URL
Fix https://github.com/khuedoan/homelab/issues/62
|
2022-05-19 00:18:29 +07:00 |
|
Khue Doan
|
cb87bbc690
|
style(metal): fix Ansible lint
|
2022-05-14 21:24:39 +07:00 |
|
Khue Doan
|
0fadfaaf5e
|
chore(k3s): upgrade to v1.23.6
|
2022-05-14 14:23:25 +07:00 |
|
Khue Doan
|
132cd58c90
|
chore(k3s): ugprade to latest patch 1.23.5
|
2022-04-28 11:51:44 +07:00 |
|
Renovate Bot
|
bda1382704
|
chore(deps): update dependency alpine to v20220316
|
2022-03-23 13:33:53 +00:00 |
|
Khue Doan
|
a7d3045150
|
chore(k3s): upgrade to 1.23.4
|
2022-03-14 20:38:01 +07:00 |
|
Khue Doan
|
a706ca30c4
|
style(metal): update some task names
|
2022-03-06 14:47:32 +07:00 |
|
Khue Doan
|
a515b1eaac
|
feat(metal): enable automatic upgrade for Rocky Linux
|
2022-02-25 01:31:52 +07:00 |
|
Khue Doan
|
1812ac67be
|
feat(metal): show DHCP and TFTP logs
|
2022-02-20 16:08:10 +07:00 |
|
Khue Doan
|
bce3291872
|
refactor(metal): create partitions manually
https://github.com/khuedoan/homelab/issues/40
|
2022-02-19 12:23:57 +07:00 |
|
linhng
|
d10892a326
|
fix: use ip lease range based on network cidr (#41)
Co-authored-by: Nguyen Van Linh <linhnguyen.workspace@gmail.com>
|
2022-02-13 10:00:27 +07:00 |
|
Khue Doan
|
01712883fa
|
refactor(kickstart): do not create a /home partition
https://github.com/khuedoan/homelab/issues/40
|
2022-02-13 08:37:02 +07:00 |
|
Khue Doan
|
2b85b11fc8
|
chore(k3s): upgrade to latest version
Need to automate this with Renovate Bot
|
2022-01-28 01:48:54 +07:00 |
|
Renovate Bot
|
d6a8495767
|
chore(deps): update all non-major dependencies helm releases
|
2022-01-27 18:19:34 +00:00 |
|
Khue Doan
|
59f900aef4
|
chore(metal/pxe): clean up rendered files
|
2022-01-16 10:59:23 +07:00 |
|
Khue Doan
|
431e6c151b
|
fix(metal/pxe): use host var instead of group var for disk and nic
|
2022-01-15 16:37:41 +07:00 |
|
Khue Doan
|
c7da5cf185
|
chore(metal): switch to k3s 1.23 stable
|
2022-01-08 00:56:44 +07:00 |
|
Khue Doan
|
8ab9ac0817
|
feat(metallb): generate address pool automatically
|
2021-12-27 13:44:21 +07:00 |
|
Khue Doan
|
5de50cd42d
|
style: Ansible lint
|
2021-12-26 12:12:36 +07:00 |
|
Khue Doan
|
d1727230eb
|
chore: upgrade to Kubernetes 1.23
|
2021-12-25 11:37:28 +07:00 |
|
Khue Doan
|
9921cfab2d
|
style(k3s): get config from default instead of hard code
|
2021-12-24 18:17:24 +07:00 |
|
Khue Doan
|
fee5058a22
|
feat: enable encryption at rest for Secrets
|
2021-12-22 15:25:59 +07:00 |
|
Khue Doan
|
045f7a377e
|
perf(metal): disable all unused components
|
2021-12-22 15:25:32 +07:00 |
|
Loc Mai
|
cb57ddbb28
|
fix(metal): fix deprecated kernel parameter (#6)
|
2021-12-06 09:04:22 +07:00 |
|