Khue Doan
|
5de50cd42d
|
style: Ansible lint
|
2021-12-26 12:12:36 +07:00 |
|
Khue Doan
|
d1727230eb
|
chore: upgrade to Kubernetes 1.23
|
2021-12-25 11:37:28 +07:00 |
|
Khue Doan
|
9921cfab2d
|
style(k3s): get config from default instead of hard code
|
2021-12-24 18:17:24 +07:00 |
|
Khue Doan
|
fee5058a22
|
feat: enable encryption at rest for Secrets
|
2021-12-22 15:25:59 +07:00 |
|
Khue Doan
|
045f7a377e
|
perf(metal): disable all unused components
|
2021-12-22 15:25:32 +07:00 |
|
Loc Mai
|
cb57ddbb28
|
fix(metal): fix deprecated kernel parameter (#6)
|
2021-12-06 09:04:22 +07:00 |
|
Khue Doan
|
14ab5b24b6
|
fix(metal): ignore cached k3s binary
|
2021-11-25 18:30:30 +07:00 |
|
Khue Doan
|
a2895c822d
|
fix(metal): fix cluster token generation
|
2021-11-25 18:29:41 +07:00 |
|
Khue Doan
|
ffb3a913d2
|
fix(metal): get kubeconfig from the first node only
|
2021-11-25 18:29:27 +07:00 |
|
Khue Doan
|
33219fd533
|
perf(metal): cache k3s binary on the controller
|
2021-11-25 18:28:19 +07:00 |
|
Khue Doan
|
dccdb9a494
|
fix(metal): use correct permission for kube config file
|
2021-11-16 11:18:48 +07:00 |
|
Khue Doan
|
7ab581fc6a
|
chore: upgrade Rocky Linux ISO version
|
2021-11-16 09:04:29 +07:00 |
|
Khue Doan
|
cdbbd3900d
|
chore(k3s)!: upgrade to Kubernetes v1.22.2
|
2021-10-28 21:25:34 +07:00 |
|
Khue Doan
|
1f6eb7f227
|
metal: fix unknown k3s param in worker nodes
|
2021-09-17 23:34:34 +07:00 |
|
Khue Doan
|
29ea97c509
|
Disable default storage (local) and ingress (traefik)
|
2021-09-03 12:32:32 +07:00 |
|
Khue Doan
|
f1263eb9b4
|
Set the correct cluster address in local kubeconfig
|
2021-09-01 20:12:09 +07:00 |
|
Khue Doan
|
e028ca7bc2
|
Move k3s systemd service from handler to task
|
2021-09-01 16:26:10 +07:00 |
|
Khue Doan
|
dc80ff21f9
|
Fix incorrect kubeconfig path
|
2021-09-01 05:46:12 +07:00 |
|
Khue Doan
|
6f5ef180d3
|
Fetch kubeconfig to local
|
2021-09-01 05:43:35 +07:00 |
|
Khue Doan
|
8a8d4d7ea2
|
Working k3s service and config
|
2021-09-01 05:35:35 +07:00 |
|
Khue Doan
|
713631587c
|
Improve k3s config template rendering
|
2021-09-01 04:58:47 +07:00 |
|
Khue Doan
|
92387435c8
|
Add k3s role
|
2021-09-01 04:19:05 +07:00 |
|
Khue Doan
|
1ddab8a2a4
|
Move dhcp and grub config to data
|
2021-08-31 05:11:42 +07:00 |
|
Khue Doan
|
5d44f46401
|
Add missing iSCSI package to kickstart
|
2021-08-31 04:38:30 +07:00 |
|
Khue Doan
|
2a944bd597
|
Fix incorrect installer address
|
2021-08-31 04:17:59 +07:00 |
|
Khue Doan
|
e4b2ebb979
|
Remove tfstate role
|
2021-08-31 02:12:41 +07:00 |
|
Khue Doan
|
626afa352c
|
Working installer
|
2021-08-31 02:11:33 +07:00 |
|
Khue Doan
|
03ef74fe05
|
Use generic Ansible wait for connection
|
2021-08-31 02:10:26 +07:00 |
|
Khue Doan
|
bb94e89409
|
Add PXE server data dirs
|
2021-08-31 00:35:35 +07:00 |
|
Khue Doan
|
25de291c71
|
Split init config to a separate role
|
2021-08-30 23:47:16 +07:00 |
|
Khue Doan
|
32b86b6c68
|
Restructure pxe server role files and templates
|
2021-08-30 23:44:25 +07:00 |
|
Khue Doan
|
0954f69ab3
|
Increase wait time out
|
2021-08-21 12:50:58 +00:00 |
|
Khue Doan
|
ad9eaaca7f
|
Generate ISO file name automatically
|
2021-08-21 10:59:51 +00:00 |
|
Khue Doan
|
b672b7a46b
|
Rename infra layer to cluster
|
2021-08-20 19:31:04 +07:00 |
|
Khue Doan
|
303e837230
|
Upgrade to latest CoreOS testing and remove ostree bug workaround
https://github.com/coreos/fedora-coreos-tracker/issues/746#issuecomment-895311722
|
2021-08-15 10:56:28 +00:00 |
|
Khue Doan
|
4fb52951ea
|
Move back to latest stable CoreOS release
|
2021-07-25 12:30:15 +07:00 |
|
Khue Doan
|
499dd397be
|
Use volume for PXE config files
|
2021-07-23 13:50:33 +07:00 |
|
Khue Doan
|
daeeebae56
|
Upgrade to latest CoreOS testing stream
https://github.com/coreos/fedora-coreos-config/pull/1114
|
2021-07-23 12:55:19 +07:00 |
|
Khue Doan
|
67428587b2
|
Revert "Use 7z instead of xorriso to extract the ISO file"
This reverts commit cb5acb199a .
|
2021-06-26 22:55:55 +07:00 |
|
Khue Doan
|
377da14a6e
|
Revert "Assume yes in 7z extract command"
This reverts commit 6069ff1e53 .
|
2021-06-26 22:55:34 +07:00 |
|
Khue Doan
|
6069ff1e53
|
Assume yes in 7z extract command
|
2021-06-26 21:21:59 +07:00 |
|
Khue Doan
|
cb5acb199a
|
Use 7z instead of xorriso to extract the ISO file
|
2021-06-26 21:18:12 +07:00 |
|
Khue Doan
|
fee0d7dbbb
|
Fix flannel support on Fedora CoreOS
https://github.com/poseidon/typhoon/pull/795
|
2021-06-20 18:13:20 +07:00 |
|
Khue Doan
|
a2734f6793
|
Workaround ostree remount bug
https://github.com/coreos/fedora-coreos-tracker/issues/870
https://github.com/coreos/fedora-coreos-tracker/issues/746#issuecomment-779015192
|
2021-06-20 11:49:54 +07:00 |
|
Khue Doan
|
b916233da5
|
Reduce CoreOS log verbosity
|
2021-06-20 05:09:18 +07:00 |
|
Khue Doan
|
be9e27c775
|
Upgrade CoreOS version
|
2021-06-17 01:05:00 +07:00 |
|
Khue Doan
|
cf74317393
|
Use CoreOS testing stream for cgroups v2
https://github.com/coreos/fedora-coreos-tracker/issues/292
https://github.com/coreos/fedora-coreos-config/pull/1033
|
2021-06-15 19:56:38 +07:00 |
|
Khue Doan
|
d3a890cf13
|
Use variable for netmask
|
2021-06-14 17:09:55 +07:00 |
|
Khue Doan
|
e89847e83c
|
Restructure PXE boot for separation of concerns
|
2021-06-14 14:04:29 +07:00 |
|
Khue Doan
|
73f6ce771b
|
Fix indent
|
2021-06-14 13:29:49 +07:00 |
|
Khue Doan
|
84213c2a09
|
Revert "Always wipe disk and filesystems"
This reverts commit 0091ab9f6f .
|
2021-06-14 13:28:10 +07:00 |
|
Khue Doan
|
0091ab9f6f
|
Always wipe disk and filesystems
|
2021-06-14 01:31:02 +07:00 |
|
Khue Doan
|
42746ffdf2
|
Remove search regex for etcd check
|
2021-06-13 22:34:55 +07:00 |
|
Khue Doan
|
358ed82d28
|
Move tfstate to ignition config
|
2021-06-13 21:56:23 +07:00 |
|
Khue Doan
|
69c6f665f7
|
Check port instead of Ansible connection because CoreOS doesn't have Python
|
2021-06-13 20:26:24 +07:00 |
|
Khue Doan
|
154fa56575
|
Enable Open-iSCSI daemon service
|
2021-06-13 17:48:00 +07:00 |
|
Khue Doan
|
428bdf8d52
|
Use absolute symlink for timezone
|
2021-06-13 14:46:00 +07:00 |
|
Khue Doan
|
86a6312e60
|
Set static IP address
|
2021-06-13 14:23:51 +07:00 |
|
Khue Doan
|
65cf85da20
|
Change default user to root
|
2021-06-13 14:23:30 +07:00 |
|
Khue Doan
|
2216214d47
|
Change Butane template file name
|
2021-06-13 13:32:18 +07:00 |
|
Khue Doan
|
c276ac9df7
|
Use MAC address to get ignition config
|
2021-06-13 13:25:32 +07:00 |
|
Khue Doan
|
ef7e613aee
|
Use variable for timezone
|
2021-06-13 13:19:24 +07:00 |
|
Khue Doan
|
812de88d03
|
Remove Butane from PXE server docker compose
Already have a task to render Ignition configs
|
2021-06-13 13:12:40 +07:00 |
|
Khue Doan
|
ad75900e9c
|
Render Ignition JSON from Butane YAML
|
2021-06-13 13:08:55 +07:00 |
|
Khue Doan
|
f1dc32c009
|
Use template for Butane configs
|
2021-06-13 13:03:36 +07:00 |
|
Khue Doan
|
0157d25093
|
Change PXE server task and handler name
|
2021-06-13 11:49:09 +07:00 |
|
Khue Doan
|
a30adaec2a
|
Set timezone
|
2021-06-13 11:33:53 +07:00 |
|
Khue Doan
|
bf518e969f
|
Set hostname in ignition config
|
2021-06-13 11:28:37 +07:00 |
|
Khue Doan
|
99b02bbab6
|
Remove Docker role, CoreOS has Docker preinstalled
|
2021-06-13 11:07:56 +07:00 |
|
Khue Doan
|
754c0ac109
|
Use the same grubx64.efi path as the image
|
2021-06-13 03:27:15 +07:00 |
|
Khue Doan
|
6fae2f5413
|
Extract grubx64.efi from boot partition image
|
2021-06-13 03:17:15 +07:00 |
|
Khue Doan
|
d616abe807
|
Replace kickstart files with ignition
|
2021-06-13 02:39:47 +07:00 |
|
Khue Doan
|
77d87f0c33
|
Replace kickstart with ignition
|
2021-06-13 02:02:22 +07:00 |
|
Khue Doan
|
fe40b8b6df
|
Make menu entry easier to read
|
2021-06-13 01:55:18 +07:00 |
|
Khue Doan
|
9a3461e05c
|
Remove unnecessary first boot flag
|
2021-06-13 01:39:38 +07:00 |
|
Khue Doan
|
ac30775a1e
|
Remove centralized CPU issue mitigation control config
|
2021-06-13 01:30:01 +07:00 |
|
Khue Doan
|
ac04f89a45
|
Disable cgroup v1
|
2021-06-13 01:29:24 +07:00 |
|
Khue Doan
|
301a247612
|
Reduce GRUB timeout
|
2021-06-13 01:22:07 +07:00 |
|
Khue Doan
|
7b5a238257
|
Update boot entry for CoreOS and ignition
|
2021-06-13 01:20:04 +07:00 |
|
Khue Doan
|
6dd12557e5
|
Switch to CoreOS image
|
2021-06-13 00:46:06 +07:00 |
|
Khue Doan
|
fb54a09ff1
|
Move ISO files to files/images instead of build/images
|
2021-06-12 18:07:24 +07:00 |
|
Khue Doan
|
3cc673d274
|
Improve kickstart config
|
2021-06-11 14:04:18 +07:00 |
|
Khue Doan
|
e051149311
|
Cleaner Ansible inventory
|
2021-06-09 19:23:28 +07:00 |
|
Khue Doan
|
8111fbe6ad
|
Generate Terraform backend config automatically
|
2021-06-09 12:23:27 +07:00 |
|
Khue Doan
|
9b458435e0
|
Fix can't create tfstate container
|
2021-06-08 20:37:39 +07:00 |
|
Khue Doan
|
9338f01b05
|
Run tfstate role on first host
|
2021-06-08 18:29:09 +07:00 |
|
Khue Doan
|
b1c6620322
|
Revert "Remove etcd role"
This reverts commit 5e0036defd .
|
2021-06-08 18:06:15 +07:00 |
|
Khue Doan
|
409ed33353
|
Add handler to stop PXE server after completed
|
2021-06-06 13:49:54 +07:00 |
|
Khue Doan
|
9379e45b18
|
Start iSCSI service
|
2021-05-23 02:56:42 +07:00 |
|
Khue Doan
|
668580e8b1
|
Add todo for small root size
|
2021-05-23 02:08:13 +07:00 |
|
Khue Doan
|
2c6c2149cb
|
Remove LXD
|
2021-05-21 02:54:48 +07:00 |
|
Khue Doan
|
613a72ea65
|
Set subuid/subgid before starting LXD
|
2021-05-17 01:46:09 +07:00 |
|
Khue Doan
|
d577dfbaab
|
Fix container failed to start
Error: Failed to run: /usr/bin/lxd forkstart tfstate /var/lib/lxd/containers /var/log/lxd/tfstate/lxc.conf
|
2021-05-17 01:16:07 +07:00 |
|
Khue Doan
|
fd6ab62a12
|
Add root device for tfstate container
Because default profile was removed
|
2021-05-17 01:09:38 +07:00 |
|
Khue Doan
|
8287fe696f
|
Install LXD via dnf instead of snap
I hate snap
|
2021-05-16 23:59:42 +07:00 |
|
Khue Doan
|
ef79644dfa
|
Swith to Fedora for bare metal nodes
|
2021-05-16 22:57:20 +07:00 |
|
Khue Doan
|
52828a363e
|
Fix cluster member join on LXD 4.14
https://discuss.linuxcontainers.org/t/lxd-4-14-has-been-released/11008
|
2021-05-16 17:34:22 +07:00 |
|
Khue Doan
|
17745bbc20
|
Fix syntax
|
2021-05-16 16:05:05 +07:00 |
|
Khue Doan
|
56dd371fa8
|
Extract instead of mounting the OS ISO file
Avoid using privileged container or root permission on local machine
|
2021-05-16 15:10:23 +07:00 |
|
Khue Doan
|
53bd439431
|
Ensure idempotency for bare metal provisioning
|
2021-05-16 13:12:41 +07:00 |
|