Commit Graph

209 Commits

Author SHA1 Message Date
Khue Doan
5de50cd42d style: Ansible lint 2021-12-26 12:12:36 +07:00
Khue Doan
d1727230eb chore: upgrade to Kubernetes 1.23 2021-12-25 11:37:28 +07:00
Khue Doan
9921cfab2d style(k3s): get config from default instead of hard code 2021-12-24 18:17:24 +07:00
Khue Doan
fee5058a22 feat: enable encryption at rest for Secrets 2021-12-22 15:25:59 +07:00
Khue Doan
045f7a377e perf(metal): disable all unused components 2021-12-22 15:25:32 +07:00
Loc Mai
cb57ddbb28
fix(metal): fix deprecated kernel parameter (#6) 2021-12-06 09:04:22 +07:00
Khue Doan
14ab5b24b6 fix(metal): ignore cached k3s binary 2021-11-25 18:30:30 +07:00
Khue Doan
a2895c822d fix(metal): fix cluster token generation 2021-11-25 18:29:41 +07:00
Khue Doan
ffb3a913d2 fix(metal): get kubeconfig from the first node only 2021-11-25 18:29:27 +07:00
Khue Doan
33219fd533 perf(metal): cache k3s binary on the controller 2021-11-25 18:28:19 +07:00
Khue Doan
dccdb9a494 fix(metal): use correct permission for kube config file 2021-11-16 11:18:48 +07:00
Khue Doan
7ab581fc6a chore: upgrade Rocky Linux ISO version 2021-11-16 09:04:29 +07:00
Khue Doan
cdbbd3900d chore(k3s)!: upgrade to Kubernetes v1.22.2 2021-10-28 21:25:34 +07:00
Khue Doan
1f6eb7f227 metal: fix unknown k3s param in worker nodes 2021-09-17 23:34:34 +07:00
Khue Doan
29ea97c509 Disable default storage (local) and ingress (traefik) 2021-09-03 12:32:32 +07:00
Khue Doan
f1263eb9b4 Set the correct cluster address in local kubeconfig 2021-09-01 20:12:09 +07:00
Khue Doan
e028ca7bc2 Move k3s systemd service from handler to task 2021-09-01 16:26:10 +07:00
Khue Doan
dc80ff21f9 Fix incorrect kubeconfig path 2021-09-01 05:46:12 +07:00
Khue Doan
6f5ef180d3 Fetch kubeconfig to local 2021-09-01 05:43:35 +07:00
Khue Doan
8a8d4d7ea2 Working k3s service and config 2021-09-01 05:35:35 +07:00
Khue Doan
713631587c Improve k3s config template rendering 2021-09-01 04:58:47 +07:00
Khue Doan
92387435c8 Add k3s role 2021-09-01 04:19:05 +07:00
Khue Doan
1ddab8a2a4 Move dhcp and grub config to data 2021-08-31 05:11:42 +07:00
Khue Doan
5d44f46401 Add missing iSCSI package to kickstart 2021-08-31 04:38:30 +07:00
Khue Doan
2a944bd597 Fix incorrect installer address 2021-08-31 04:17:59 +07:00
Khue Doan
e4b2ebb979 Remove tfstate role 2021-08-31 02:12:41 +07:00
Khue Doan
626afa352c Working installer 2021-08-31 02:11:33 +07:00
Khue Doan
03ef74fe05 Use generic Ansible wait for connection 2021-08-31 02:10:26 +07:00
Khue Doan
bb94e89409 Add PXE server data dirs 2021-08-31 00:35:35 +07:00
Khue Doan
25de291c71 Split init config to a separate role 2021-08-30 23:47:16 +07:00
Khue Doan
32b86b6c68 Restructure pxe server role files and templates 2021-08-30 23:44:25 +07:00
Khue Doan
0954f69ab3 Increase wait time out 2021-08-21 12:50:58 +00:00
Khue Doan
ad9eaaca7f Generate ISO file name automatically 2021-08-21 10:59:51 +00:00
Khue Doan
b672b7a46b Rename infra layer to cluster 2021-08-20 19:31:04 +07:00
Khue Doan
303e837230 Upgrade to latest CoreOS testing and remove ostree bug workaround
https://github.com/coreos/fedora-coreos-tracker/issues/746#issuecomment-895311722
2021-08-15 10:56:28 +00:00
Khue Doan
4fb52951ea
Move back to latest stable CoreOS release 2021-07-25 12:30:15 +07:00
Khue Doan
499dd397be
Use volume for PXE config files 2021-07-23 13:50:33 +07:00
Khue Doan
daeeebae56
Upgrade to latest CoreOS testing stream
https://github.com/coreos/fedora-coreos-config/pull/1114
2021-07-23 12:55:19 +07:00
Khue Doan
67428587b2
Revert "Use 7z instead of xorriso to extract the ISO file"
This reverts commit cb5acb199a.
2021-06-26 22:55:55 +07:00
Khue Doan
377da14a6e
Revert "Assume yes in 7z extract command"
This reverts commit 6069ff1e53.
2021-06-26 22:55:34 +07:00
Khue Doan
6069ff1e53
Assume yes in 7z extract command 2021-06-26 21:21:59 +07:00
Khue Doan
cb5acb199a
Use 7z instead of xorriso to extract the ISO file 2021-06-26 21:18:12 +07:00
Khue Doan
fee0d7dbbb
Fix flannel support on Fedora CoreOS
https://github.com/poseidon/typhoon/pull/795
2021-06-20 18:13:20 +07:00
Khue Doan
a2734f6793 Workaround ostree remount bug
https://github.com/coreos/fedora-coreos-tracker/issues/870
https://github.com/coreos/fedora-coreos-tracker/issues/746#issuecomment-779015192
2021-06-20 11:49:54 +07:00
Khue Doan
b916233da5 Reduce CoreOS log verbosity 2021-06-20 05:09:18 +07:00
Khue Doan
be9e27c775 Upgrade CoreOS version 2021-06-17 01:05:00 +07:00
Khue Doan
cf74317393 Use CoreOS testing stream for cgroups v2
https://github.com/coreos/fedora-coreos-tracker/issues/292
https://github.com/coreos/fedora-coreos-config/pull/1033
2021-06-15 19:56:38 +07:00
Khue Doan
d3a890cf13 Use variable for netmask 2021-06-14 17:09:55 +07:00
Khue Doan
e89847e83c Restructure PXE boot for separation of concerns 2021-06-14 14:04:29 +07:00
Khue Doan
73f6ce771b Fix indent 2021-06-14 13:29:49 +07:00
Khue Doan
84213c2a09 Revert "Always wipe disk and filesystems"
This reverts commit 0091ab9f6f.
2021-06-14 13:28:10 +07:00
Khue Doan
0091ab9f6f Always wipe disk and filesystems 2021-06-14 01:31:02 +07:00
Khue Doan
42746ffdf2 Remove search regex for etcd check 2021-06-13 22:34:55 +07:00
Khue Doan
358ed82d28 Move tfstate to ignition config 2021-06-13 21:56:23 +07:00
Khue Doan
69c6f665f7 Check port instead of Ansible connection because CoreOS doesn't have Python 2021-06-13 20:26:24 +07:00
Khue Doan
154fa56575 Enable Open-iSCSI daemon service 2021-06-13 17:48:00 +07:00
Khue Doan
428bdf8d52 Use absolute symlink for timezone 2021-06-13 14:46:00 +07:00
Khue Doan
86a6312e60 Set static IP address 2021-06-13 14:23:51 +07:00
Khue Doan
65cf85da20 Change default user to root 2021-06-13 14:23:30 +07:00
Khue Doan
2216214d47 Change Butane template file name 2021-06-13 13:32:18 +07:00
Khue Doan
c276ac9df7 Use MAC address to get ignition config 2021-06-13 13:25:32 +07:00
Khue Doan
ef7e613aee Use variable for timezone 2021-06-13 13:19:24 +07:00
Khue Doan
812de88d03 Remove Butane from PXE server docker compose
Already have a task to render Ignition configs
2021-06-13 13:12:40 +07:00
Khue Doan
ad75900e9c Render Ignition JSON from Butane YAML 2021-06-13 13:08:55 +07:00
Khue Doan
f1dc32c009 Use template for Butane configs 2021-06-13 13:03:36 +07:00
Khue Doan
0157d25093 Change PXE server task and handler name 2021-06-13 11:49:09 +07:00
Khue Doan
a30adaec2a Set timezone 2021-06-13 11:33:53 +07:00
Khue Doan
bf518e969f Set hostname in ignition config 2021-06-13 11:28:37 +07:00
Khue Doan
99b02bbab6 Remove Docker role, CoreOS has Docker preinstalled 2021-06-13 11:07:56 +07:00
Khue Doan
754c0ac109 Use the same grubx64.efi path as the image 2021-06-13 03:27:15 +07:00
Khue Doan
6fae2f5413 Extract grubx64.efi from boot partition image 2021-06-13 03:17:15 +07:00
Khue Doan
d616abe807 Replace kickstart files with ignition 2021-06-13 02:39:47 +07:00
Khue Doan
77d87f0c33 Replace kickstart with ignition 2021-06-13 02:02:22 +07:00
Khue Doan
fe40b8b6df Make menu entry easier to read 2021-06-13 01:55:18 +07:00
Khue Doan
9a3461e05c Remove unnecessary first boot flag 2021-06-13 01:39:38 +07:00
Khue Doan
ac30775a1e Remove centralized CPU issue mitigation control config 2021-06-13 01:30:01 +07:00
Khue Doan
ac04f89a45 Disable cgroup v1 2021-06-13 01:29:24 +07:00
Khue Doan
301a247612 Reduce GRUB timeout 2021-06-13 01:22:07 +07:00
Khue Doan
7b5a238257 Update boot entry for CoreOS and ignition 2021-06-13 01:20:04 +07:00
Khue Doan
6dd12557e5 Switch to CoreOS image 2021-06-13 00:46:06 +07:00
Khue Doan
fb54a09ff1 Move ISO files to files/images instead of build/images 2021-06-12 18:07:24 +07:00
Khue Doan
3cc673d274 Improve kickstart config 2021-06-11 14:04:18 +07:00
Khue Doan
e051149311 Cleaner Ansible inventory 2021-06-09 19:23:28 +07:00
Khue Doan
8111fbe6ad Generate Terraform backend config automatically 2021-06-09 12:23:27 +07:00
Khue Doan
9b458435e0 Fix can't create tfstate container 2021-06-08 20:37:39 +07:00
Khue Doan
9338f01b05 Run tfstate role on first host 2021-06-08 18:29:09 +07:00
Khue Doan
b1c6620322 Revert "Remove etcd role"
This reverts commit 5e0036defd.
2021-06-08 18:06:15 +07:00
Khue Doan
409ed33353 Add handler to stop PXE server after completed 2021-06-06 13:49:54 +07:00
Khue Doan
9379e45b18 Start iSCSI service 2021-05-23 02:56:42 +07:00
Khue Doan
668580e8b1 Add todo for small root size 2021-05-23 02:08:13 +07:00
Khue Doan
2c6c2149cb Remove LXD 2021-05-21 02:54:48 +07:00
Khue Doan
613a72ea65 Set subuid/subgid before starting LXD 2021-05-17 01:46:09 +07:00
Khue Doan
d577dfbaab Fix container failed to start
Error: Failed to run: /usr/bin/lxd forkstart tfstate /var/lib/lxd/containers /var/log/lxd/tfstate/lxc.conf
2021-05-17 01:16:07 +07:00
Khue Doan
fd6ab62a12 Add root device for tfstate container
Because default profile was removed
2021-05-17 01:09:38 +07:00
Khue Doan
8287fe696f Install LXD via dnf instead of snap
I hate snap
2021-05-16 23:59:42 +07:00
Khue Doan
ef79644dfa Swith to Fedora for bare metal nodes 2021-05-16 22:57:20 +07:00
Khue Doan
52828a363e Fix cluster member join on LXD 4.14
https://discuss.linuxcontainers.org/t/lxd-4-14-has-been-released/11008
2021-05-16 17:34:22 +07:00
Khue Doan
17745bbc20 Fix syntax 2021-05-16 16:05:05 +07:00
Khue Doan
56dd371fa8 Extract instead of mounting the OS ISO file
Avoid using privileged container or root permission on local machine
2021-05-16 15:10:23 +07:00
Khue Doan
53bd439431 Ensure idempotency for bare metal provisioning 2021-05-16 13:12:41 +07:00