Commit Graph

104 Commits

Author SHA1 Message Date
Khue Doan
26d7fa3e2f Use container for master nodes
For better resource usage, still use VM on worker nodes due to ISCSI
bug in the Linux kernel
2021-05-03 00:28:16 +07:00
Khue Doan
d45637056a Move RKE cluster to sperate module, with cleaner Ansible check 2021-05-02 23:07:16 +07:00
Khue Doan
d02fc8dd92 Rename 2021-05-02 22:19:28 +07:00
Khue Doan
9becad7623 Clean up 2021-05-02 22:18:33 +07:00
Khue Doan
f7f9844ac2 Use Ansible provisioner module for VPN 2021-05-02 22:16:37 +07:00
Khue Doan
a6a1a7266d Add Ansible provisioner module 2021-05-02 21:58:33 +07:00
Khue Doan
c1a993cd22 Restructure 2021-05-02 21:30:26 +07:00
Khue Doan
20a27a1ee2 Update TODOs 2021-05-02 21:10:42 +07:00
Khue Doan
e6e5c177d6 Standardize TODOs 2021-05-01 22:51:55 +07:00
Khue Doan
e559769e6f Update todos 2021-05-01 22:42:58 +07:00
Khue Doan
8878dc65bb Move cert-manager config to seperate file 2021-05-01 22:33:46 +07:00
Khue Doan
3acd328de0 Move MetalLB config to seperate file 2021-05-01 22:14:00 +07:00
Khue Doan
543214e2d3 Turn on Vault ingress 2021-05-01 17:52:17 +07:00
Khue Doan
c09d02531d Disable VPN 2021-05-01 16:15:49 +07:00
Khue Doan
75a3e2cddf Generate Wireguard keys 2021-05-01 16:13:27 +07:00
Khue Doan
0fc931e62e Use VM for VPN instance
Due to CentOS 8 kernel
2021-05-01 15:39:10 +07:00
Khue Doan
06143f2798 Terraform format 2021-05-01 14:57:20 +07:00
Khue Doan
c8bb547c49 Move limits to seperate block 2021-05-01 11:59:25 +07:00
Khue Doan
d9cadb36bb Working VPN module and Ansible 2021-05-01 11:50:21 +07:00
Khue Doan
51c725edc0 Change VPN module name 2021-04-30 14:55:36 +07:00
Khue Doan
62a830caa7 Fix wrong module name 2021-04-30 14:54:30 +07:00
Khue Doan
77859b49f9 Add VPN module 2021-04-30 14:53:06 +07:00
Khue Doan
ad5e8cef86 Use VM instead of container for Kubernetes node
Squashed commit of the following:

commit 421e849664810ae41e493049edcc1ac2846ca6fc
Author: Khue Doan <khuedoan98@gmail.com>
Date:   Mon Apr 26 22:09:35 2021 +0700

    Move k8s nodes to LXD virtual machines instead of containers

    Avoid kernel issue and improve security (not using privileged containers)

commit 0ce297d0aee30e2253cd69c4ac93f21cf637f25a
Author: Khue Doan <khuedoan98@gmail.com>
Date:   Mon Apr 26 21:25:11 2021 +0700

    Adjust priority
2021-04-26 22:24:11 +07:00
Khue Doan
74015da237 Increase LXD storage size 2021-04-26 01:21:22 +07:00
Khue Doan
96a9c8edb3 Configure etcd using env file 2021-04-25 00:55:04 +07:00
Khue Doan
eaba343a5d Increase node disk size to 32GiB 2021-04-24 22:58:22 +07:00
Khue Doan
4a45188358 Move tfstate back to etcd 2021-04-24 18:04:26 +07:00
Khue Doan
51a5468855 Restructure 2021-04-24 13:45:13 +07:00
Khue Doan
74d5a08a3b Fix infra makefile 2021-04-24 13:40:16 +07:00
Khue Doan
3a8dcde9aa Clean up 2021-04-22 01:31:37 +07:00
Khue Doan
afe59da31e Remove legacy bare metal cluster 2021-04-22 01:30:13 +07:00
Khue Doan
efa23b0fee Add argocd back to bootstrap 2021-04-22 01:25:16 +07:00
Khue Doan
ddf881e2ea Upgrade cert manager and longhorn version 2021-04-22 01:05:10 +07:00
Khue Doan
9576bb3fa2 Upgrade metallb, nginx and prometheus version 2021-04-22 00:16:23 +07:00
Khue Doan
93ee9e025e Add cluster bootstrap 2021-04-22 00:12:14 +07:00
Khue Doan
ad8204cb3d Update todo 2021-04-21 23:37:59 +07:00
Khue Doan
613fb33959 Generate LXD tfvars instead of environment variable 2021-04-21 23:29:18 +07:00
Khue Doan
147dfd57ef Wait for docker socket instead of just wait for 5 minutes
Make sure docker is actually available and will not fail if it takes
longer than 5 minutes to install docker
2021-04-21 23:01:55 +07:00
Khue Doan
bccec48529 Move core services to new module 2021-04-20 19:24:23 +07:00
Khue Doan
5b8f968261 Rename some modules 2021-04-20 19:12:07 +07:00
Khue Doan
1b9a434833 Initial modules structure 2021-04-20 19:00:57 +07:00
Khue Doan
0789c9b3e4 Generate SSH key for RKE nodes automatically
Instead of using the same one with bare-metal nodes
2021-04-20 18:46:01 +07:00
Khue Doan
0d9cf4ee86 Revert "Remove legacy bare metal cluster"
This reverts commit 06a9936510.
2021-04-20 17:56:03 +07:00
Khue Doan
400288a786 Update title for each layer 2021-04-20 01:55:09 +07:00
Khue Doan
5772849767 Add more TODO 2021-04-19 22:39:51 +07:00
Khue Doan
d1b8b309d5 Fix incorrect IP after first apply 2021-04-19 02:02:48 +07:00
Khue Doan
bc36a09477 Fix incorrect init path 2021-04-19 01:54:11 +07:00
Khue Doan
f8dc1c35ae Restructure infra 2021-04-19 01:36:12 +07:00
Khue Doan
06a9936510 Remove legacy bare metal cluster 2021-04-19 01:23:21 +07:00
Khue Doan
3e06e711d3 Harden kube config permission 2021-04-19 01:00:27 +07:00