Commit Graph

135 Commits

Author SHA1 Message Date
Khue Doan
611d11ace3
Use SSH key path instead of the key content 2021-06-27 00:10:17 +07:00
Khue Doan
8fa93b61b6
Increase timout to 10 minutes 2021-06-20 18:21:05 +07:00
Khue Doan
4d864faa4a Fix Terraform diff 2021-06-14 00:09:59 +07:00
Khue Doan
2dfa0b5559 Update infra docs 2021-06-13 19:12:09 +07:00
Khue Doan
0036b77a28 Move Longhorn back to infra layer
Due to race condition
2021-06-13 19:07:05 +07:00
Khue Doan
4c8412affe Upgrade ArgoCD 2021-06-13 16:46:26 +07:00
Khue Doan
ef99f6015c Format Terraform 2021-06-13 16:23:36 +07:00
Khue Doan
28c0596849 Support CoreOS in RKE 2021-06-13 16:21:28 +07:00
Khue Doan
69219b6649 Fix formatting 2021-06-10 19:35:42 +07:00
Khue Doan
03deb76eb9 Add linters for metal and infra 2021-06-10 19:28:34 +07:00
Khue Doan
8111fbe6ad Generate Terraform backend config automatically 2021-06-09 12:23:27 +07:00
Khue Doan
30d5aa86c5 Wait until all resources are in a ready state when installing ArgoCD 2021-06-09 02:10:42 +07:00
Khue Doan
3516b2cb29 Move ArgoCD back to infra bootstrap
Avoid ArgoCD server issue when applying Argo apps to quickly
2021-06-09 01:03:40 +07:00
Khue Doan
bf8ea27bc0 Get node config from Ansible inventory 2021-06-09 00:48:22 +07:00
Khue Doan
9b458435e0 Fix can't create tfstate container 2021-06-08 20:37:39 +07:00
Khue Doan
6e39a3db19 Improve makefile targets consistency 2021-05-23 12:24:32 +07:00
Khue Doan
00a8d044c0 Improve infra Makefile for automation 2021-05-23 11:56:05 +07:00
Khue Doan
24d2765472 Cleanup comment 2021-05-21 18:13:16 +07:00
Khue Doan
12b405cfa0 Change infra make targets 2021-05-21 11:21:14 +07:00
Khue Doan
2c6c2149cb Remove LXD 2021-05-21 02:54:48 +07:00
Khue Doan
b391ee5be3 Fix VM secure boot 2021-05-17 02:20:01 +07:00
Khue Doan
c6736e8bde Add missing root device for VPN server 2021-05-17 02:19:37 +07:00
Khue Doan
30ab309a22 Change tfstate IP 2021-05-17 01:49:07 +07:00
Khue Doan
9e7f7909fd Add cloudflared tunnel config files and service 2021-05-03 21:52:59 +07:00
Khue Doan
27c048931f Move cloudflared package URL to default var 2021-05-03 13:30:07 +07:00
Khue Doan
94ae26ee90 Install cloudflared 2021-05-03 13:18:34 +07:00
Khue Doan
dffe892a2d Fix wrong VPN IP 2021-05-03 11:42:05 +07:00
Khue Doan
b301e4083a Enable VPN server in base 2021-05-03 11:08:02 +07:00
Khue Doan
de977f2560 Add Wireguard client keys 2021-05-03 11:07:40 +07:00
Khue Doan
fb823e30f4 Start Wireguard service 2021-05-03 11:07:19 +07:00
Khue Doan
6ef691eca4 Render wg0 config file with private key and subnet 2021-05-03 10:41:26 +07:00
Khue Doan
26d7fa3e2f Use container for master nodes
For better resource usage, still use VM on worker nodes due to ISCSI
bug in the Linux kernel
2021-05-03 00:28:16 +07:00
Khue Doan
d45637056a Move RKE cluster to sperate module, with cleaner Ansible check 2021-05-02 23:07:16 +07:00
Khue Doan
d02fc8dd92 Rename 2021-05-02 22:19:28 +07:00
Khue Doan
9becad7623 Clean up 2021-05-02 22:18:33 +07:00
Khue Doan
f7f9844ac2 Use Ansible provisioner module for VPN 2021-05-02 22:16:37 +07:00
Khue Doan
a6a1a7266d Add Ansible provisioner module 2021-05-02 21:58:33 +07:00
Khue Doan
c1a993cd22 Restructure 2021-05-02 21:30:26 +07:00
Khue Doan
20a27a1ee2 Update TODOs 2021-05-02 21:10:42 +07:00
Khue Doan
e6e5c177d6 Standardize TODOs 2021-05-01 22:51:55 +07:00
Khue Doan
e559769e6f Update todos 2021-05-01 22:42:58 +07:00
Khue Doan
8878dc65bb Move cert-manager config to seperate file 2021-05-01 22:33:46 +07:00
Khue Doan
3acd328de0 Move MetalLB config to seperate file 2021-05-01 22:14:00 +07:00
Khue Doan
543214e2d3 Turn on Vault ingress 2021-05-01 17:52:17 +07:00
Khue Doan
c09d02531d Disable VPN 2021-05-01 16:15:49 +07:00
Khue Doan
75a3e2cddf Generate Wireguard keys 2021-05-01 16:13:27 +07:00
Khue Doan
0fc931e62e Use VM for VPN instance
Due to CentOS 8 kernel
2021-05-01 15:39:10 +07:00
Khue Doan
06143f2798 Terraform format 2021-05-01 14:57:20 +07:00
Khue Doan
c8bb547c49 Move limits to seperate block 2021-05-01 11:59:25 +07:00
Khue Doan
d9cadb36bb Working VPN module and Ansible 2021-05-01 11:50:21 +07:00