Khue Doan
5c004b47f4
feat(scripts): print warnings when getting admin credentials
2022-07-26 01:23:38 +07:00
Khue Doan
5ec740c08b
ci: just run pre-commit and external for now
2022-07-24 00:16:00 +07:00
Khue Doan
65c33f886c
docs: add more secrets management details
2022-07-24 00:14:12 +07:00
Khue Doan
db1ba14e78
refactor: add Gitea and Vault to main apps list
2022-07-24 00:01:36 +07:00
Khue Doan
d00ec32548
refactor(tools): reduce reflector sort to 5 most recently synchronized servers
2022-07-24 00:00:48 +07:00
Khue Doan
2b7fb0fb73
feat: get credentials automatically in post install script
2022-07-23 23:59:29 +07:00
Khue Doan
318988939a
build: run post install scripts by default
2022-07-23 23:59:11 +07:00
Khue Doan
2115030a90
style: fix shellcheck
2022-07-21 01:58:00 +07:00
Khue Doan
5a3aabbbbb
chore(longhorn): upgrade to latest v1.3.0 for bug fixes
2022-07-20 23:44:41 +07:00
Khue Doan
bcb17a8f58
perf(argocd): turning on selective sync
...
https://argo-cd.readthedocs.io/en/stable/user-guide/sync-options/#selective-sync
Currently when syncing using auto sync ArgoCD applies every object in the application.
For applications containing thousands of objects this takes quite a long time and puts undue pressure on the api server.
Turning on selective sync option which will sync only out-of-sync resources.
2022-07-20 23:15:15 +07:00
Khue Doan
d06470c3ea
fix: skip new config job run if previous job run hasn't finished yet
2022-07-20 23:12:01 +07:00
Khue Doan
13a36499fe
docs: rename development environment to sandbox
2022-07-20 23:00:39 +07:00
Khue Doan
022b8169db
refactor(metal): migrate to Fedora 36 for newer packages ( #73 )
2022-07-20 22:49:12 +07:00
Khue Doan
214f635697
feat: add pre-commit hooks
2022-07-19 21:16:19 +07:00
Khue Doan
c3f4433a1a
feat: add script to setup Gitea tokens and OAuth apps
2022-07-18 03:56:05 +07:00
Khue Doan
3bf72dfde3
docs: update contributor list and move to front page
2022-07-18 02:26:57 +07:00
Khue Doan
6bab9e3955
docs: add dnsmasq runbook to index
2022-07-18 01:50:48 +07:00
Bourne-ID
f650c894b0
refactor(pxe)!: combine dhcpd and tftpd to dnsmasq ( #69 )
...
* Add DNSMasq as an opt-in option
* Default to original
* Remove commented commands
* Remove dhcpd, replaced with dnsmasq
* Remove dhcpd, replaced with dnsmasq
* Move to dnsmasq
* dnsmasq output to stdout
* dnsmasq
* dnsmasq
* Remove unused code, update tag
* Correct title
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* Remove TFTP
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* rename to Dnsmasq
Moving to use proxy by default
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* Rename for consistency
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* Correct terminology
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* formatting
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
* Additional logging
* proxy-by-default
* naming consistency
* naming consistency
* Revert Dnsmasq proxy ask
* proxy enabled by default
* naming consistency
* naming consistency
* Formatting
Co-authored-by: Robin Bourne <robin.bourne@onepeloton.com>
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
2022-07-18 01:39:02 +07:00
Khue Doan
5321995852
feat(tools): set KUBECONFIG by default
...
No more export KUBECONFIG!
2022-07-16 12:14:31 +07:00
Khue Doan
353819f35d
docs: update some architecture
2022-07-15 20:28:57 +07:00
Khue Doan
8d4454dd2b
feat(tools): install k9s
2022-07-15 10:58:51 +07:00
Khue Doan
5ddb62c08b
docs: require external resources for production environment
...
- More secure
- We can still use development environment without external resources
2022-07-14 21:53:42 +07:00
Khue Doan
0cafd02d8c
docs: update local dev env instruction
2022-07-14 00:41:26 +07:00
Khue Doan
c52c439fac
refactor(cert-manager): remove email
...
- Use Prometheus to monitor the certs instead of mail
- Cloudflare API token doesn't require email like API key
2022-07-07 13:44:21 +07:00
Khue Doan
868f53c7d0
Revert "feat: install Keycloak Operator"
...
This reverts commit 405b3a7eee
.
2022-07-06 13:07:05 +07:00
Khue Doan
69221fb26e
docs: fix links
2022-07-06 12:39:08 +07:00
Khue Doan
cd41343580
refactor(docs): migrate to mkdocs ( #68 )
...
* refactor(docs): migrate to mkdocs
* More markdown
* Admonitions
2022-07-06 12:33:35 +07:00
Khue Doan
a7f91505a5
feat(external-dns)!: add cluster name as owner ID
...
Need to replace DNS records
2022-06-29 08:42:41 +07:00
Khue Doan
952db7cbde
fix(keycloak): set replica count
2022-06-18 01:48:44 +07:00
Khue Doan
0d405ddbb6
feat(keycloak): deploy Keycloak cluster
2022-06-18 00:49:25 +07:00
Khue Doan
9743cd4ada
refactor(keycloak): use release channel
2022-06-18 00:28:53 +07:00
Khue Doan
405b3a7eee
feat: install Keycloak Operator
2022-06-18 00:04:23 +07:00
Khue Doan
1dab7e9aaa
chore(external): update Terraform version
2022-06-08 20:28:52 +07:00
Khue Doan
3b0b934df4
fix(metal): disable root password login
...
https://github.com/khuedoan/homelab/issues/63
Rocky Linux 8.6 requires root password to be set
2022-06-08 20:27:28 +07:00
Khue Doan
d4189337a8
Revert "fix(metal): temporarily revert to Rocky Linux 8.5"
...
This reverts commit 0e1ff60b10
.
2022-06-08 20:27:12 +07:00
Elliot Blackburn
a22829a060
chore(external-secrets): upgrade to 0.5.6 ( #66 )
...
0.5.2 had an issue where if the value was not found in vault there would be a panic from a nil pointer reference. This was fixed in 0.5.3 but the latest is 0.5.6 so I tested that and all seems to work well.
2022-06-08 20:23:26 +07:00
Khue Doan
e173b18b97
docs(external): use table for list of resources
2022-06-04 14:33:22 +07:00
Khue Doan
5dc905be86
docs: update external resources instruction
2022-06-04 14:25:55 +07:00
Khue Doan
f434953d37
docs: add post-installation
2022-06-04 13:51:58 +07:00
Khue Doan
0e1ff60b10
fix(metal): temporarily revert to Rocky Linux 8.5
2022-06-03 19:47:05 +07:00
Khue Doan
606c7ab46b
fix(metal): upgrade Rocky Linux to 8.6 and pin permanent URL
...
Fix https://github.com/khuedoan/homelab/issues/62
2022-05-19 00:18:29 +07:00
Khue Doan
c726a0ae20
style: fix YAML lint
2022-05-14 21:36:41 +07:00
Khue Doan
cb87bbc690
style(metal): fix Ansible lint
2022-05-14 21:24:39 +07:00
Khue Doan
9ae548d7dd
ci: add lint task back
2022-05-14 21:08:18 +07:00
Khue Doan
d16f56981b
style(metal): forces color mode in Ansible
2022-05-14 21:01:32 +07:00
Khue Doan
7b744b5e92
ci: get pipeline secrets from Vault
2022-05-14 20:59:15 +07:00
Khue Doan
dc7d1256a0
build: set kubeconfig from global Makefile
...
Separate build steps in Tekton can use service account instead of config file
2022-05-14 20:06:57 +07:00
Khue Doan
7b1afcc55c
ci: build pipeline rewrite
2022-05-14 19:04:46 +07:00
Khue Doan
cca6e61c5b
feat(tools): install yamllint and ansible-lint
2022-05-14 18:41:44 +07:00
Khue Doan
0e351eb81b
fix(tekton): remove Terraform service account
2022-05-14 17:50:58 +07:00