Commit Graph

1408 Commits

Author SHA1 Message Date
Khue Doan
5c004b47f4 feat(scripts): print warnings when getting admin credentials 2022-07-26 01:23:38 +07:00
Khue Doan
5ec740c08b ci: just run pre-commit and external for now 2022-07-24 00:16:00 +07:00
Khue Doan
65c33f886c docs: add more secrets management details 2022-07-24 00:14:12 +07:00
Khue Doan
db1ba14e78 refactor: add Gitea and Vault to main apps list 2022-07-24 00:01:36 +07:00
Khue Doan
d00ec32548 refactor(tools): reduce reflector sort to 5 most recently synchronized servers 2022-07-24 00:00:48 +07:00
Khue Doan
2b7fb0fb73 feat: get credentials automatically in post install script 2022-07-23 23:59:29 +07:00
Khue Doan
318988939a build: run post install scripts by default 2022-07-23 23:59:11 +07:00
Khue Doan
2115030a90 style: fix shellcheck 2022-07-21 01:58:00 +07:00
Khue Doan
5a3aabbbbb chore(longhorn): upgrade to latest v1.3.0 for bug fixes 2022-07-20 23:44:41 +07:00
Khue Doan
bcb17a8f58 perf(argocd): turning on selective sync
https://argo-cd.readthedocs.io/en/stable/user-guide/sync-options/#selective-sync

Currently when syncing using auto sync ArgoCD applies every object in the application.
For applications containing thousands of objects this takes quite a long time and puts undue pressure on the api server.
Turning on selective sync option which will sync only out-of-sync resources.
2022-07-20 23:15:15 +07:00
Khue Doan
d06470c3ea fix: skip new config job run if previous job run hasn't finished yet 2022-07-20 23:12:01 +07:00
Khue Doan
13a36499fe docs: rename development environment to sandbox 2022-07-20 23:00:39 +07:00
Khue Doan
022b8169db
refactor(metal): migrate to Fedora 36 for newer packages (#73) 2022-07-20 22:49:12 +07:00
Khue Doan
214f635697 feat: add pre-commit hooks 2022-07-19 21:16:19 +07:00
Khue Doan
c3f4433a1a feat: add script to setup Gitea tokens and OAuth apps 2022-07-18 03:56:05 +07:00
Khue Doan
3bf72dfde3 docs: update contributor list and move to front page 2022-07-18 02:26:57 +07:00
Khue Doan
6bab9e3955 docs: add dnsmasq runbook to index 2022-07-18 01:50:48 +07:00
Bourne-ID
f650c894b0
refactor(pxe)!: combine dhcpd and tftpd to dnsmasq (#69)
* Add DNSMasq as an opt-in option

* Default to original

* Remove commented commands

* Remove dhcpd, replaced with dnsmasq

* Remove dhcpd, replaced with dnsmasq

* Move to dnsmasq

* dnsmasq output to stdout

* dnsmasq

* dnsmasq

* Remove unused code, update tag

* Correct title

Co-authored-by: Khue Doan <khuedoan98@gmail.com>

* Remove TFTP

Co-authored-by: Khue Doan <khuedoan98@gmail.com>

* rename to Dnsmasq

Moving to use proxy by default

Co-authored-by: Khue Doan <khuedoan98@gmail.com>

* Rename for consistency

Co-authored-by: Khue Doan <khuedoan98@gmail.com>

* Correct terminology

Co-authored-by: Khue Doan <khuedoan98@gmail.com>

* formatting

Co-authored-by: Khue Doan <khuedoan98@gmail.com>

* Additional logging

* proxy-by-default

* naming consistency

* naming consistency

* Revert Dnsmasq proxy ask

* proxy enabled by default

* naming consistency

* naming consistency

* Formatting

Co-authored-by: Robin Bourne <robin.bourne@onepeloton.com>
Co-authored-by: Khue Doan <khuedoan98@gmail.com>
2022-07-18 01:39:02 +07:00
Khue Doan
5321995852 feat(tools): set KUBECONFIG by default
No more export KUBECONFIG!
2022-07-16 12:14:31 +07:00
Khue Doan
353819f35d docs: update some architecture 2022-07-15 20:28:57 +07:00
Khue Doan
8d4454dd2b feat(tools): install k9s 2022-07-15 10:58:51 +07:00
Khue Doan
5ddb62c08b docs: require external resources for production environment
- More secure
- We can still use development environment without external resources
2022-07-14 21:53:42 +07:00
Khue Doan
0cafd02d8c docs: update local dev env instruction 2022-07-14 00:41:26 +07:00
Khue Doan
c52c439fac refactor(cert-manager): remove email
- Use Prometheus to monitor the certs instead of mail
- Cloudflare API token doesn't require email like API key
2022-07-07 13:44:21 +07:00
Khue Doan
868f53c7d0 Revert "feat: install Keycloak Operator"
This reverts commit 405b3a7eee.
2022-07-06 13:07:05 +07:00
Khue Doan
69221fb26e docs: fix links 2022-07-06 12:39:08 +07:00
Khue Doan
cd41343580
refactor(docs): migrate to mkdocs (#68)
* refactor(docs): migrate to mkdocs

* More markdown

* Admonitions
2022-07-06 12:33:35 +07:00
Khue Doan
a7f91505a5 feat(external-dns)!: add cluster name as owner ID
Need to replace DNS records
2022-06-29 08:42:41 +07:00
Khue Doan
952db7cbde fix(keycloak): set replica count 2022-06-18 01:48:44 +07:00
Khue Doan
0d405ddbb6 feat(keycloak): deploy Keycloak cluster 2022-06-18 00:49:25 +07:00
Khue Doan
9743cd4ada refactor(keycloak): use release channel 2022-06-18 00:28:53 +07:00
Khue Doan
405b3a7eee feat: install Keycloak Operator 2022-06-18 00:04:23 +07:00
Khue Doan
1dab7e9aaa chore(external): update Terraform version 2022-06-08 20:28:52 +07:00
Khue Doan
3b0b934df4 fix(metal): disable root password login
https://github.com/khuedoan/homelab/issues/63

Rocky Linux 8.6 requires root password to be set
2022-06-08 20:27:28 +07:00
Khue Doan
d4189337a8 Revert "fix(metal): temporarily revert to Rocky Linux 8.5"
This reverts commit 0e1ff60b10.
2022-06-08 20:27:12 +07:00
Elliot Blackburn
a22829a060
chore(external-secrets): upgrade to 0.5.6 (#66)
0.5.2 had an issue where if the value was not found in vault there would be a panic from a nil pointer reference. This was fixed in 0.5.3 but the latest is 0.5.6 so I tested that and all seems to work well.
2022-06-08 20:23:26 +07:00
Khue Doan
e173b18b97 docs(external): use table for list of resources 2022-06-04 14:33:22 +07:00
Khue Doan
5dc905be86 docs: update external resources instruction 2022-06-04 14:25:55 +07:00
Khue Doan
f434953d37 docs: add post-installation 2022-06-04 13:51:58 +07:00
Khue Doan
0e1ff60b10 fix(metal): temporarily revert to Rocky Linux 8.5 2022-06-03 19:47:05 +07:00
Khue Doan
606c7ab46b
fix(metal): upgrade Rocky Linux to 8.6 and pin permanent URL
Fix https://github.com/khuedoan/homelab/issues/62
2022-05-19 00:18:29 +07:00
Khue Doan
c726a0ae20 style: fix YAML lint 2022-05-14 21:36:41 +07:00
Khue Doan
cb87bbc690 style(metal): fix Ansible lint 2022-05-14 21:24:39 +07:00
Khue Doan
9ae548d7dd ci: add lint task back 2022-05-14 21:08:18 +07:00
Khue Doan
d16f56981b style(metal): forces color mode in Ansible 2022-05-14 21:01:32 +07:00
Khue Doan
7b744b5e92 ci: get pipeline secrets from Vault 2022-05-14 20:59:15 +07:00
Khue Doan
dc7d1256a0 build: set kubeconfig from global Makefile
Separate build steps in Tekton can use service account instead of config file
2022-05-14 20:06:57 +07:00
Khue Doan
7b1afcc55c ci: build pipeline rewrite 2022-05-14 19:04:46 +07:00
Khue Doan
cca6e61c5b feat(tools): install yamllint and ansible-lint 2022-05-14 18:41:44 +07:00
Khue Doan
0e351eb81b fix(tekton): remove Terraform service account 2022-05-14 17:50:58 +07:00