Khue Doan
|
24d2765472
|
Cleanup comment
|
2021-05-21 18:13:16 +07:00 |
|
Khue Doan
|
12b405cfa0
|
Change infra make targets
|
2021-05-21 11:21:14 +07:00 |
|
Khue Doan
|
2c6c2149cb
|
Remove LXD
|
2021-05-21 02:54:48 +07:00 |
|
Khue Doan
|
b391ee5be3
|
Fix VM secure boot
|
2021-05-17 02:20:01 +07:00 |
|
Khue Doan
|
c6736e8bde
|
Add missing root device for VPN server
|
2021-05-17 02:19:37 +07:00 |
|
Khue Doan
|
30ab309a22
|
Change tfstate IP
|
2021-05-17 01:49:07 +07:00 |
|
Khue Doan
|
9e7f7909fd
|
Add cloudflared tunnel config files and service
|
2021-05-03 21:52:59 +07:00 |
|
Khue Doan
|
27c048931f
|
Move cloudflared package URL to default var
|
2021-05-03 13:30:07 +07:00 |
|
Khue Doan
|
94ae26ee90
|
Install cloudflared
|
2021-05-03 13:18:34 +07:00 |
|
Khue Doan
|
dffe892a2d
|
Fix wrong VPN IP
|
2021-05-03 11:42:05 +07:00 |
|
Khue Doan
|
b301e4083a
|
Enable VPN server in base
|
2021-05-03 11:08:02 +07:00 |
|
Khue Doan
|
de977f2560
|
Add Wireguard client keys
|
2021-05-03 11:07:40 +07:00 |
|
Khue Doan
|
fb823e30f4
|
Start Wireguard service
|
2021-05-03 11:07:19 +07:00 |
|
Khue Doan
|
6ef691eca4
|
Render wg0 config file with private key and subnet
|
2021-05-03 10:41:26 +07:00 |
|
Khue Doan
|
26d7fa3e2f
|
Use container for master nodes
For better resource usage, still use VM on worker nodes due to ISCSI
bug in the Linux kernel
|
2021-05-03 00:28:16 +07:00 |
|
Khue Doan
|
d45637056a
|
Move RKE cluster to sperate module, with cleaner Ansible check
|
2021-05-02 23:07:16 +07:00 |
|
Khue Doan
|
d02fc8dd92
|
Rename
|
2021-05-02 22:19:28 +07:00 |
|
Khue Doan
|
9becad7623
|
Clean up
|
2021-05-02 22:18:33 +07:00 |
|
Khue Doan
|
f7f9844ac2
|
Use Ansible provisioner module for VPN
|
2021-05-02 22:16:37 +07:00 |
|
Khue Doan
|
a6a1a7266d
|
Add Ansible provisioner module
|
2021-05-02 21:58:33 +07:00 |
|
Khue Doan
|
c1a993cd22
|
Restructure
|
2021-05-02 21:30:26 +07:00 |
|
Khue Doan
|
20a27a1ee2
|
Update TODOs
|
2021-05-02 21:10:42 +07:00 |
|
Khue Doan
|
e6e5c177d6
|
Standardize TODOs
|
2021-05-01 22:51:55 +07:00 |
|
Khue Doan
|
e559769e6f
|
Update todos
|
2021-05-01 22:42:58 +07:00 |
|
Khue Doan
|
8878dc65bb
|
Move cert-manager config to seperate file
|
2021-05-01 22:33:46 +07:00 |
|
Khue Doan
|
3acd328de0
|
Move MetalLB config to seperate file
|
2021-05-01 22:14:00 +07:00 |
|
Khue Doan
|
543214e2d3
|
Turn on Vault ingress
|
2021-05-01 17:52:17 +07:00 |
|
Khue Doan
|
c09d02531d
|
Disable VPN
|
2021-05-01 16:15:49 +07:00 |
|
Khue Doan
|
75a3e2cddf
|
Generate Wireguard keys
|
2021-05-01 16:13:27 +07:00 |
|
Khue Doan
|
0fc931e62e
|
Use VM for VPN instance
Due to CentOS 8 kernel
|
2021-05-01 15:39:10 +07:00 |
|
Khue Doan
|
06143f2798
|
Terraform format
|
2021-05-01 14:57:20 +07:00 |
|
Khue Doan
|
c8bb547c49
|
Move limits to seperate block
|
2021-05-01 11:59:25 +07:00 |
|
Khue Doan
|
d9cadb36bb
|
Working VPN module and Ansible
|
2021-05-01 11:50:21 +07:00 |
|
Khue Doan
|
51c725edc0
|
Change VPN module name
|
2021-04-30 14:55:36 +07:00 |
|
Khue Doan
|
62a830caa7
|
Fix wrong module name
|
2021-04-30 14:54:30 +07:00 |
|
Khue Doan
|
77859b49f9
|
Add VPN module
|
2021-04-30 14:53:06 +07:00 |
|
Khue Doan
|
ad5e8cef86
|
Use VM instead of container for Kubernetes node
Squashed commit of the following:
commit 421e849664810ae41e493049edcc1ac2846ca6fc
Author: Khue Doan <khuedoan98@gmail.com>
Date: Mon Apr 26 22:09:35 2021 +0700
Move k8s nodes to LXD virtual machines instead of containers
Avoid kernel issue and improve security (not using privileged containers)
commit 0ce297d0aee30e2253cd69c4ac93f21cf637f25a
Author: Khue Doan <khuedoan98@gmail.com>
Date: Mon Apr 26 21:25:11 2021 +0700
Adjust priority
|
2021-04-26 22:24:11 +07:00 |
|
Khue Doan
|
74015da237
|
Increase LXD storage size
|
2021-04-26 01:21:22 +07:00 |
|
Khue Doan
|
96a9c8edb3
|
Configure etcd using env file
|
2021-04-25 00:55:04 +07:00 |
|
Khue Doan
|
eaba343a5d
|
Increase node disk size to 32GiB
|
2021-04-24 22:58:22 +07:00 |
|
Khue Doan
|
4a45188358
|
Move tfstate back to etcd
|
2021-04-24 18:04:26 +07:00 |
|
Khue Doan
|
51a5468855
|
Restructure
|
2021-04-24 13:45:13 +07:00 |
|
Khue Doan
|
74d5a08a3b
|
Fix infra makefile
|
2021-04-24 13:40:16 +07:00 |
|
Khue Doan
|
3a8dcde9aa
|
Clean up
|
2021-04-22 01:31:37 +07:00 |
|
Khue Doan
|
afe59da31e
|
Remove legacy bare metal cluster
|
2021-04-22 01:30:13 +07:00 |
|
Khue Doan
|
efa23b0fee
|
Add argocd back to bootstrap
|
2021-04-22 01:25:16 +07:00 |
|
Khue Doan
|
ddf881e2ea
|
Upgrade cert manager and longhorn version
|
2021-04-22 01:05:10 +07:00 |
|
Khue Doan
|
9576bb3fa2
|
Upgrade metallb, nginx and prometheus version
|
2021-04-22 00:16:23 +07:00 |
|
Khue Doan
|
93ee9e025e
|
Add cluster bootstrap
|
2021-04-22 00:12:14 +07:00 |
|
Khue Doan
|
ad8204cb3d
|
Update todo
|
2021-04-21 23:37:59 +07:00 |
|