Commit Graph

248 Commits

Author SHA1 Message Date
Vegard Hagen
9de3a6ba0f chore(cloudflared): clean up cloudflared deployment
remove unused config and enable renovate
2024-11-17 17:03:28 +01:00
Vegard Hagen
11cba23ae2 chore(renovate): add renovate comments on deployments
This should allow Renovate to pick up the image versions automatically and create update PRs
2024-11-17 17:03:28 +01:00
Vegard Hagen
e03f701119 chore(nas): update TrueNAS IP after router change
New router is trash and can't set static IPs, some device stole the old one
2024-11-17 17:03:28 +01:00
Vegard Hagen
5abde08753 fix: conflicting svc name 2024-11-17 17:03:28 +01:00
Vegard Hagen
e6a8ad12c8 chore(plex): use Memory for /tmp and /transcode
Try to fix NodeDiskPressure issue where I think Plex filling up ephemeral storage
2024-11-17 17:03:28 +01:00
Vegard Hagen
dbb66ba93d chore: rename svc for arr-stack applications
Dropping -web postfix since it doesn't mean anything and I think it just clutters
2024-11-17 17:03:28 +01:00
Vegard Hagen
8668f58a38 chore(gateway): update to Gateway API 1.1.0 2024-11-17 17:03:28 +01:00
renovate[bot]
42c7fe1e12 chore(deps): merge renovate PRs
chore(deps): update helm release argo-cd to v7.4.2

chore(deps): update sealed-secrets docker tag to v2.4.5

chore(deps): update terraform proxmox to v0.62.0

chore(deps): update keycloak docker tag to v22

chore(deps): update helm release cilium to v1.16.0

chore(deps): update dependency cilium/cilium to v1.16.0

chore(deps): update helm release cert-manager to v1.15.2
2024-11-17 17:03:27 +01:00
Vegard Hagen
25f977126b fix(cert): ask for cert for both *.stonegarden.dev and stonegarden.dev
try to bypass letsenrypt rate-limiting for exact set of domains
2024-11-17 17:03:27 +01:00
Vegard Hagen
ba2ab6435b chore(cleanup): Cleanup after cluster rebuild 2024-11-17 17:03:27 +01:00
Vegard Hagen
1c602200c7 chore(pv): consistent naming scheme 2024-11-17 17:03:27 +01:00
Vegard Hagen
69d56e8e71 feat: install Netbird as a VPN solution
Also configure Netbird OIDC client in Keycloak using Crossplane
2024-11-17 17:03:27 +01:00
Vegard Stenhjem Hagen
935a13038c fix(remark42): correct url
Wrong URL used from the old cluster. Made it impossible to log in due to a wrong redirect URL.
2024-11-17 17:03:27 +01:00
Vegard Hagen
e2e30a91e2 fix: bind prometheus operator to same node with volume
No shared volumes (yet), so have to bind deployment to the node with the volume
2024-11-17 17:03:27 +01:00
Vegard Hagen
c4ba7120dd feat(tofu): updated kubernetes setup
tried to to some tidying while writing an article based on the current
setup.
2024-11-17 17:03:27 +01:00
Vegard Hagen
0a265cbfd5 fix: crossed-wires in Plex and Jellyfin 2024-11-17 17:03:26 +01:00
Vegard Hagen
605e5ef181 fix: increase cpu and mem limits for Argo CD and cloudflared
This will hopefully alleviate issues with syncing and routing apparently hanging sometimes
2024-11-17 17:03:26 +01:00
Vegard Hagen
4cb40d3282 feat: configure keycloak using crossplane provider 2024-11-17 17:03:26 +01:00
Vegard Hagen
76ab7a71a2 feat: add crossplane.io
Planning to use Crossplane to declaratively create OIDC-clients for Keycloak
2024-11-17 17:03:26 +01:00
Vegard Hagen
628bdb53d6 feat(auth): add keycloak for auth 2024-11-17 17:03:26 +01:00
renovate[bot]
4d47d1c972 chore(deps): merge renovate PRs
chore(deps): update helm release node-feature-discovery to v0.16.3

chore(deps): update helm release argo-cd to v7.3.9

chore(deps): update dependency cilium/cilium to v1.15.7

chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.30.0

chore(deps): update terraform proxmox to v0.61.1

chore(deps): update sealed-secrets docker tag to v2.4.2
2024-11-17 17:03:16 +01:00
Vegard Hagen
be08e101b2 feat: configure renovate 2024-07-22 01:05:36 +02:00
Vegard Hagen
c80528ffbd chore: switch remodelling to main-branch 2024-07-21 23:40:10 +02:00
Vegard Hagen
207b1892bf feat: cleanup of remodelling
move remodel folder down to root and delete old unused manifests
2024-07-21 23:21:12 +02:00
Vegard Hagen
f1797c94ec feat(monitoring): install kube-prometheus-stack 2024-07-21 23:20:31 +02:00
Vegard Hagen
4d2fe610e2 fix(proxmox-csi-plugin): fetch from Helm chart 2024-07-21 23:20:31 +02:00
Vegard Hagen
1eafca98b5 chore: enable Cilium Hubble 2024-07-21 23:20:31 +02:00
Vegard Hagen
7c492be433 chore: switch Argo CD over to main domain 2024-07-21 23:20:30 +02:00
Vegard Hagen
aa6af35f48 feat: routes to cluster external services
Routes to Home Assistant, Proxmox and TrueNAS
2024-07-21 23:20:30 +02:00
Vegard Hagen
482c0368ea fix: stonegarden routing
added a listener for stonegarden.dev
2024-07-21 23:20:30 +02:00
Vegard Hagen
2c1e894af0 fix: media player services
Correct labels and svc type
2024-07-21 23:20:30 +02:00
Vegard Hagen
bca0889c47 fix(cloudflared): correct routing to homepage 2024-07-21 23:20:30 +02:00
Vegard Hagen
bf5f26da5a chore: restore remark42 backup 2024-07-21 23:20:30 +02:00
Vegard Hagen
32cee0d16e chore: move from euclid sub-domain to main domain 2024-07-21 23:20:30 +02:00
Vegard Hagen
731a16baf3 feat(homepage): add homepage and blog
Add Vue Homepage, Hugo blog and Remark 42 for comments
2024-07-21 23:20:30 +02:00
Vegard Hagen
3edf3260d6 feat(media): add media players
Adding both Plex and Jellyfin media players
2024-07-21 23:20:29 +02:00
Vegard Hagen
7780078984 chore(tofu): don't use variables for nodes and volumes in main module 2024-07-21 23:20:29 +02:00
Vegard Hagen
ac16aed3d2 feat: add node-feature-discovery and intel-device-plugins
label nodes with features to enable e.g. Intel iGPU support
2024-07-21 23:20:29 +02:00
Vegard Hagen
bd7ae1f091 feat(arr): implement arr stack
lidarr, prowlarr, radarr, sonarr, torrent
2024-07-21 23:20:29 +02:00
Vegard Hagen
d7f90f34e1 fix: configure gateway
also add a cluster-issuer for ingresses
2024-07-21 23:20:29 +02:00
Vegard Hagen
127290d99b feat(network): add cloudflared
encrypted tunnel to cloudflare
2024-07-21 23:20:29 +02:00
Vegard Hagen
f65eb23cc5 fix: proxmox-csi-plugin configuration
Missing volumes attributes
2024-07-21 23:20:29 +02:00
Vegard Hagen
f39dc98104 fix(talos): upgrading now actually works without destroying the cluster
Use only one pve_download_file resource and key it to <node>_<schematic-id>_<version>
2024-07-21 23:20:29 +02:00
Vegard Hagen
29f5ce8b14 feat(talos): generate schematic id on-the-fly and add possibility of changing image
Utilize Talos Factory API to generate schematic ID which can be used to download images

Add possibility of running two different images in cluster. This allows changing version or schematic for the cluster in place
2024-07-21 23:20:28 +02:00
Vegard Hagen
805ab61017 feat: add Gateway API and Gateways 2024-07-21 23:20:28 +02:00
Vegard Hagen
fe368b937e feat: add Cert-manager 2024-07-21 23:20:28 +02:00
Vegard Hagen
7a946e3e23 feat(volumes): provision volumes using tofu
Declaratively provision Proxmox backend persistent volumes for Kubernetes using the Proxmox REST API
2024-07-21 23:20:28 +02:00
Vegard Hagen
677cf79d6c chore(argocd): set resources for components 2024-07-21 23:20:28 +02:00
Vegard Hagen
8c5389c31c feat(talos): Bootstrap Cilium from ConfigMap
Start adding infrastructure manifests
2024-07-21 23:20:28 +02:00
Vegard Hagen
daaafc8fea feat(tofu): split into multiple configurations 2024-07-21 23:20:28 +02:00