40 Commits

Author SHA1 Message Date
Karteek
dee7911259 1. Using a dict instead of set in proxmox_virtual_environment_download_file to maintain consistant order and avoid destroying and recreating resource.
2. Pointing the update_schematic to existing file and added a comment.
3. Reverted to using http api for getting schematic id.
4. Left the official provider code intact and added a comment.
5. Fixed a typo in cert generation comment

Signed-off-by: Karteek <120569182+karteekiitg@users.noreply.github.com>
2025-02-24 19:52:46 +01:00
Vegard Hagen
25cfa2bbb6 chore(gateway): update to gateway api v1.2.1 2025-02-10 20:18:45 +01:00
renovate[bot]
77923604f2 chore(deps): renovate 2025-02-08
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68

chore(deps): update helm release argo-cd to v7.8.2

chore(deps): update helm release argo-cd to v7.8.2

chore(deps): update netbird to v0.36.5

chore(deps): update netbirdio/relay docker tag to v0.36.5

chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.1

chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.1

chore(deps): update dependency siderolabs/talos to v1.9.3

chore(deps): update keycloak docker tag to v24.4.9

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68.5.0

chore(deps): update intel device plugins to v0.32.0

chore(deps): update cloudflare/cloudflared docker tag to v2025.2.0

chore(deps): update helm release authelia to v0.9.15

chore(deps): update proxmox-csi-plugin docker tag to v0.3.5

chore(deps): update sealed-secrets docker tag to v2.5.6

chore(deps): update terraform proxmox to v0.70.1

chore(deps): update cilium to v1.17.0

chore(deps): update dependency cert-manager/cert-manager to v1.17.0

chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.11.0

chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.18.4

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69
2025-02-08 22:08:28 +01:00
Vegard Hagen
24743bf9c2 fix(cnpg): rename db volumes 2025-01-26 17:58:36 +01:00
Vegard Hagen
e039cf2237 chore(talos): update to v1.9.2 from v1.8.1 2025-01-26 16:34:45 +01:00
renovate[bot]
1efb017ef0 chore(deps): renovate 2025-01-26
chore(deps): update helm release argo-cd to v7.7.17

chore(deps): update keycloak docker tag to v24.4.6

chore(deps): update helm release node-feature-discovery to v0.17.1

chore(deps): update sealed-secrets docker tag to v2.5.4

chore(deps): update proxmox-csi-plugin docker tag to v0.3.4

chore(deps): update dependency cert-manager/cert-manager to v1.16.3

chore(deps): update dependency siderolabs/talos to v1.9.2

chore(deps): update netbird

chore(deps): update netbirdio/relay docker tag to v0.36.3

chore(deps): update cilium to v1.16.6

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.56

chore(deps): update media containers

chore(deps): update terraform talos to v0.7.1

chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.10.1

chore(deps): update terraform proxmox to v0.70.0
2025-01-26 15:59:50 +01:00
Vegard Hagen
ee741467dd fix(lldap): add tmp-volume for bootstrapping 2025-01-26 15:43:41 +01:00
Vegard Hagen
5563a63f56 feat(lldap): add cnpg database for persistence 2025-01-19 10:24:12 +01:00
renovate[bot]
ab7a292b60 chore(deps): renovate 2025-01-12
chore(deps): update keycloak docker tag to v24.4.0

chore(deps): update keycloak docker tag to v24.4.0

chore(deps): update terraform proxmox to v0.69.1

chore(deps): update terraform proxmox to v0.69.1

chore(deps): update helm release argo-cd to v7.7.15

chore(deps): update cloudflare/cloudflared docker tag to v2025

chore(deps): update media containers
2025-01-17 15:15:00 +01:00
Vegard Hagen
2674d91a48 feat(auth): enable kubectl oidc auth 2025-01-06 21:30:23 +01:00
Vegard Hagen
edd0a15345 fix(authelia): increase db disk size 2025-01-06 21:27:16 +01:00
Vegard Hagen
ce5fc25504 feat(authelia): use a cnpg managed db
use a database for presistent storage of users and sessions
2025-01-06 20:14:45 +01:00
Vegard Hagen
c9ffd698c8 fix(netbird-agent): allow read root fs and add sysctl
The agent seems to assume it's running with full root privileges,
something we don't want. Accommodate by changing manually.
2025-01-05 14:56:24 +01:00
Vegard Hagen
5ecf061fc3 fix(keycloak): move crossplane-keycloak-credentials to keycloak from crossplane namespace 2025-01-04 09:47:39 +01:00
renovate[bot]
668f052356 chore(deps): renovate PRs december 26th
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-12-24-debian-rootless

chore(deps): update helm release cert-manager to v1.16.2

chore(deps): update keycloak docker tag to v24.3.1

chore(deps): update terraform proxmox to v0.69.0

chore(deps): update cloudflare/cloudflared docker tag to v2024.12.2

chore(deps): update media containers

chore(deps): update cilium to v1.16.5

chore(deps): update netbird

chore(deps): update helm release argo-cd to v7.7.11

chore(deps): update helm release authelia to v0.9.14

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.55

chore(deps): update helm release crossplane to v1.18.2

chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.0

chore(deps): update helm release cloudnative-pg to v0.23.0

chore(deps): update helm release node-feature-discovery to v0.17.0

chore(deps): update dependency siderolabs/talos to v1.9.1

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.0

chore(deps): update proxmox-csi-plugin docker tag to v0.3.0

chore(deps): update sealed-secrets docker tag to v2.5.0

chore(deps): update terraform kubernetes to v2.35.1

chore(deps): update terraform talos to v0.7.0

fix(lldap): correct avatar url
2024-12-26 22:36:44 +01:00
Vegard Hagen
e48986a5a2 feat(authelia): add kubectl oidc account 2024-12-01 22:33:36 +01:00
Vegard Hagen
ffa170117b fix(keycloak): new postgres volume 2024-12-01 21:48:26 +01:00
renovate[bot]
acd6052af7 chore(deps): merge renovate PRs
chore(deps): update keycloak docker tag to v24

chore(deps): update sealed-secrets docker tag to v2.4.11

chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-17-debian-rootless

chore(deps): update helm release argo-cd to v7.7.3

chore(deps): update netbird to v0.32.0

chore(deps): update dependency siderolabs/talos to v1.8.3

chore(deps): update media containers
2024-11-17 17:03:36 +01:00
Milos Milosavljevic
1a46529d96 fix(cert-manager): remove deprecated flag
cert-manager deprecated flag

Gateway API CRDs

Correction
2024-11-17 17:03:35 +01:00
renovate[bot]
d898ef76e9 chore(deps): renovate bonanza
chore(deps): update helm release intel-device-plugins-operator to v0.31.1

chore(deps): update helm release intel-device-plugins-gpu to v0.31.1

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.53

chore(deps): update sealed-secrets docker tag to v2.4.9

chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-04-debian-rootless

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.54

chore(deps): update cloudflare/cloudflared docker tag to v2024.11.0

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.17

chore(deps): update helm release authelia to v0.9.9

chore(deps): update helm release cert-manager to v1.16.1

chore(deps): update dependency cilium/cilium to v1.16.3

chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.31.1

chore(deps): update helm release cloudnative-pg to v0.22.1

chore(deps): update dependency umputun/remark42 to v1.14.0

chore(deps): update helm release node-feature-discovery to v0.16.6

chore(deps): update terraform talos to v0.6.1

chore(deps): update dependency siderolabs/talos to v1.8.2

chore(deps): update terraform proxmox to v0.66.3

chore(deps): update helm release argo-cd to v7.7.0

chore(deps): update terraform kubernetes to v2.33.0

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.3.0

chore(deps): update docker.io/mvance/unbound docker tag to v1.22.0

chore(deps): update helm release crossplane to v1.18.0

chore(deps): update media containers

chore(deps): update netbird

chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v5

chore(deps): update helm release coturn to v1

chore(config): migrate config renovate.json
2024-11-17 17:03:35 +01:00
Vegard Hagen
140fbc249b feat(tofu): use new talos_image_factory_schematic resource
talos provider 0.6 added a new resource for generating the image schematic id
2024-11-17 17:03:34 +01:00
Vegard Hagen
996bf85daf chore(talos): upgrade last node ctrl-00
Regular 'terraform apply' was enough this time

We're now on Talos 1.8.1 and Kubernetes 1.31.1
2024-11-17 17:03:34 +01:00
Vegard Hagen
4c8066a130 chore(talos): upgrade node ctrl-02
It worked with 'tofu apply -refresh=false'! Still had to manually shut down the VM though. Still scary!
2024-11-17 17:03:34 +01:00
Vegard Hagen
094d72abdf chore(talos): upgrade node ctrl-01
start manual talos upgrade process

Issue with upgrading 'endppoint' node (ctrl-02) since API becomes unresponsive. Either do proper LB or maybe 'tofu apply -refresh=false'
2024-11-17 17:03:34 +01:00
renovate[bot]
d291132624 chore(deps): merge renovate PRs
chore(deps): update netbird

chore(deps): update helm release crossplane to v1.17.1

chore(deps): update media containers

chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.3.0

chore(deps): update helm release argo-cd to v7.6.8

chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-10-10-debian-rootless

chore(deps): update proxmox-csi-plugin docker tag to v0.2.13

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.16

chore(deps): update terraform proxmox to v0.66.1

chore(deps): update terraform talos to v0.6.0

chore(deps): update dependency cilium/cilium to v1.16.2

chore(deps): update dependency siderolabs/talos to v1.8.1
2024-11-17 17:03:34 +01:00
renovate[bot]
d6d5a2ad02 chore(deps): merge renovate PRs
chore(deps): update terraform restapi to v1.20.0

chore(deps): update cloudflare/cloudflared docker tag to v2024.9.1

chore(deps): update terraform proxmox to v0.64.0

chore(deps): update keycloak docker tag to v22.2.3

chore(deps): update sealed-secrets docker tag to v2.4.6

chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-09-11

chore(deps): update media containers

chore(deps): update terraform talos to v0.6.0-beta.0

chore(deps): update helm release argo-cd to v7.5.2

chore(deps): update helm release crossplane to v1.17.0
2024-11-17 17:03:32 +01:00
Vegard Hagen
d3338da90a feat(database): add cnpg for database management 2024-11-17 17:03:31 +01:00
renovate[bot]
cb1c2cdebb chore(deps): merge renovate PRs
chore(deps): update netbird to v0.28.9

chore(deps): update netbirdio/management docker tag to v0.28.9

chore(deps): update netbirdio/netbird docker tag to v0.28.9

chore(deps): update netbirdio/signal docker tag to v0.28.9

chore(deps): update cloudflare/cloudflared docker tag to v2024.8.3

chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.9.1

chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8897-e5987a19d

chore(deps): update helm release argo-cd to v7.4.5

chore(deps): update terraform proxmox to v0.63.0

chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3

chore(deps): update keycloak docker tag to v22.1.3

chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.10

chore(deps): update proxmox-csi-plugin docker tag to v0.2.9
2024-11-17 17:03:31 +01:00
Vegard Hagen
d74b811d84 chore(docs): update readme 2024-11-17 17:03:30 +01:00
Vegard Hagen
0048da7ffa chore(oidc): collect all oidc-clients under keycloak 2024-11-17 17:03:29 +01:00
renovate[bot]
89c0a27364 chore(deps): merge renovate PRs
chore(deps): update helm release node-feature-discovery to v0.16.4

chore(deps): update helm release argo-cd to v7.4.3

chore(deps): update keycloak docker tag to v22.1.1

chore(deps): update dependency umputun/remark42 to v1.13.1

chore(deps): update cloudflare/cloudflared docker tag to v2024.8.2

chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.9

chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.8

chore(deps): update ghcr.io/onedr0p/prowlarr docker tag to v1.21.2

fix(renovate): explicitly set versioning scheme for plex

chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.8.3

chore(deps): update dependency cilium/cilium to v1.16.1

chore(deps): update terraform kubernetes to v2.32.0

chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8854-f36c552fd

chore(deps): update helm release cilium to v1.16.1
2024-11-17 17:03:28 +01:00
renovate[bot]
42c7fe1e12 chore(deps): merge renovate PRs
chore(deps): update helm release argo-cd to v7.4.2

chore(deps): update sealed-secrets docker tag to v2.4.5

chore(deps): update terraform proxmox to v0.62.0

chore(deps): update keycloak docker tag to v22

chore(deps): update helm release cilium to v1.16.0

chore(deps): update dependency cilium/cilium to v1.16.0

chore(deps): update helm release cert-manager to v1.15.2
2024-11-17 17:03:27 +01:00
Vegard Hagen
ba2ab6435b chore(cleanup): Cleanup after cluster rebuild 2024-11-17 17:03:27 +01:00
Vegard Hagen
1c602200c7 chore(pv): consistent naming scheme 2024-11-17 17:03:27 +01:00
Vegard Hagen
69d56e8e71 feat: install Netbird as a VPN solution
Also configure Netbird OIDC client in Keycloak using Crossplane
2024-11-17 17:03:27 +01:00
Vegard Hagen
c4ba7120dd feat(tofu): updated kubernetes setup
tried to to some tidying while writing an article based on the current
setup.
2024-11-17 17:03:27 +01:00
Vegard Hagen
628bdb53d6 feat(auth): add keycloak for auth 2024-11-17 17:03:26 +01:00
renovate[bot]
4d47d1c972 chore(deps): merge renovate PRs
chore(deps): update helm release node-feature-discovery to v0.16.3

chore(deps): update helm release argo-cd to v7.3.9

chore(deps): update dependency cilium/cilium to v1.15.7

chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.30.0

chore(deps): update terraform proxmox to v0.61.1

chore(deps): update sealed-secrets docker tag to v2.4.2
2024-11-17 17:03:16 +01:00
Vegard Hagen
207b1892bf feat: cleanup of remodelling
move remodel folder down to root and delete old unused manifests
2024-07-21 23:21:12 +02:00
Vegard Hagen
fbdccd7731 feat(k8s): multi-node Talos cluster 2024-07-21 23:20:27 +02:00