Commit Graph

118 Commits

Author SHA1 Message Date
Khue Doan
24d2765472 Cleanup comment 2021-05-21 18:13:16 +07:00
Khue Doan
12b405cfa0 Change infra make targets 2021-05-21 11:21:14 +07:00
Khue Doan
2c6c2149cb Remove LXD 2021-05-21 02:54:48 +07:00
Khue Doan
b391ee5be3 Fix VM secure boot 2021-05-17 02:20:01 +07:00
Khue Doan
c6736e8bde Add missing root device for VPN server 2021-05-17 02:19:37 +07:00
Khue Doan
30ab309a22 Change tfstate IP 2021-05-17 01:49:07 +07:00
Khue Doan
9e7f7909fd Add cloudflared tunnel config files and service 2021-05-03 21:52:59 +07:00
Khue Doan
27c048931f Move cloudflared package URL to default var 2021-05-03 13:30:07 +07:00
Khue Doan
94ae26ee90 Install cloudflared 2021-05-03 13:18:34 +07:00
Khue Doan
dffe892a2d Fix wrong VPN IP 2021-05-03 11:42:05 +07:00
Khue Doan
b301e4083a Enable VPN server in base 2021-05-03 11:08:02 +07:00
Khue Doan
de977f2560 Add Wireguard client keys 2021-05-03 11:07:40 +07:00
Khue Doan
fb823e30f4 Start Wireguard service 2021-05-03 11:07:19 +07:00
Khue Doan
6ef691eca4 Render wg0 config file with private key and subnet 2021-05-03 10:41:26 +07:00
Khue Doan
26d7fa3e2f Use container for master nodes
For better resource usage, still use VM on worker nodes due to ISCSI
bug in the Linux kernel
2021-05-03 00:28:16 +07:00
Khue Doan
d45637056a Move RKE cluster to sperate module, with cleaner Ansible check 2021-05-02 23:07:16 +07:00
Khue Doan
d02fc8dd92 Rename 2021-05-02 22:19:28 +07:00
Khue Doan
9becad7623 Clean up 2021-05-02 22:18:33 +07:00
Khue Doan
f7f9844ac2 Use Ansible provisioner module for VPN 2021-05-02 22:16:37 +07:00
Khue Doan
a6a1a7266d Add Ansible provisioner module 2021-05-02 21:58:33 +07:00
Khue Doan
c1a993cd22 Restructure 2021-05-02 21:30:26 +07:00
Khue Doan
20a27a1ee2 Update TODOs 2021-05-02 21:10:42 +07:00
Khue Doan
e6e5c177d6 Standardize TODOs 2021-05-01 22:51:55 +07:00
Khue Doan
e559769e6f Update todos 2021-05-01 22:42:58 +07:00
Khue Doan
8878dc65bb Move cert-manager config to seperate file 2021-05-01 22:33:46 +07:00
Khue Doan
3acd328de0 Move MetalLB config to seperate file 2021-05-01 22:14:00 +07:00
Khue Doan
543214e2d3 Turn on Vault ingress 2021-05-01 17:52:17 +07:00
Khue Doan
c09d02531d Disable VPN 2021-05-01 16:15:49 +07:00
Khue Doan
75a3e2cddf Generate Wireguard keys 2021-05-01 16:13:27 +07:00
Khue Doan
0fc931e62e Use VM for VPN instance
Due to CentOS 8 kernel
2021-05-01 15:39:10 +07:00
Khue Doan
06143f2798 Terraform format 2021-05-01 14:57:20 +07:00
Khue Doan
c8bb547c49 Move limits to seperate block 2021-05-01 11:59:25 +07:00
Khue Doan
d9cadb36bb Working VPN module and Ansible 2021-05-01 11:50:21 +07:00
Khue Doan
51c725edc0 Change VPN module name 2021-04-30 14:55:36 +07:00
Khue Doan
62a830caa7 Fix wrong module name 2021-04-30 14:54:30 +07:00
Khue Doan
77859b49f9 Add VPN module 2021-04-30 14:53:06 +07:00
Khue Doan
ad5e8cef86 Use VM instead of container for Kubernetes node
Squashed commit of the following:

commit 421e849664810ae41e493049edcc1ac2846ca6fc
Author: Khue Doan <khuedoan98@gmail.com>
Date:   Mon Apr 26 22:09:35 2021 +0700

    Move k8s nodes to LXD virtual machines instead of containers

    Avoid kernel issue and improve security (not using privileged containers)

commit 0ce297d0aee30e2253cd69c4ac93f21cf637f25a
Author: Khue Doan <khuedoan98@gmail.com>
Date:   Mon Apr 26 21:25:11 2021 +0700

    Adjust priority
2021-04-26 22:24:11 +07:00
Khue Doan
74015da237 Increase LXD storage size 2021-04-26 01:21:22 +07:00
Khue Doan
96a9c8edb3 Configure etcd using env file 2021-04-25 00:55:04 +07:00
Khue Doan
eaba343a5d Increase node disk size to 32GiB 2021-04-24 22:58:22 +07:00
Khue Doan
4a45188358 Move tfstate back to etcd 2021-04-24 18:04:26 +07:00
Khue Doan
51a5468855 Restructure 2021-04-24 13:45:13 +07:00
Khue Doan
74d5a08a3b Fix infra makefile 2021-04-24 13:40:16 +07:00
Khue Doan
3a8dcde9aa Clean up 2021-04-22 01:31:37 +07:00
Khue Doan
afe59da31e Remove legacy bare metal cluster 2021-04-22 01:30:13 +07:00
Khue Doan
efa23b0fee Add argocd back to bootstrap 2021-04-22 01:25:16 +07:00
Khue Doan
ddf881e2ea Upgrade cert manager and longhorn version 2021-04-22 01:05:10 +07:00
Khue Doan
9576bb3fa2 Upgrade metallb, nginx and prometheus version 2021-04-22 00:16:23 +07:00
Khue Doan
93ee9e025e Add cluster bootstrap 2021-04-22 00:12:14 +07:00
Khue Doan
ad8204cb3d Update todo 2021-04-21 23:37:59 +07:00