Vegard Hagen
9de3a6ba0f
chore(cloudflared): clean up cloudflared deployment
...
remove unused config and enable renovate
2024-11-17 17:03:28 +01:00
Vegard Hagen
11cba23ae2
chore(renovate): add renovate comments on deployments
...
This should allow Renovate to pick up the image versions automatically and create update PRs
2024-11-17 17:03:28 +01:00
Vegard Hagen
e03f701119
chore(nas): update TrueNAS IP after router change
...
New router is trash and can't set static IPs, some device stole the old one
2024-11-17 17:03:28 +01:00
Vegard Hagen
5abde08753
fix: conflicting svc name
2024-11-17 17:03:28 +01:00
Vegard Hagen
e6a8ad12c8
chore(plex): use Memory for /tmp and /transcode
...
Try to fix NodeDiskPressure issue where I think Plex filling up ephemeral storage
2024-11-17 17:03:28 +01:00
Vegard Hagen
dbb66ba93d
chore: rename svc for arr-stack applications
...
Dropping -web postfix since it doesn't mean anything and I think it just clutters
2024-11-17 17:03:28 +01:00
Vegard Hagen
8668f58a38
chore(gateway): update to Gateway API 1.1.0
2024-11-17 17:03:28 +01:00
renovate[bot]
42c7fe1e12
chore(deps): merge renovate PRs
...
chore(deps): update helm release argo-cd to v7.4.2
chore(deps): update sealed-secrets docker tag to v2.4.5
chore(deps): update terraform proxmox to v0.62.0
chore(deps): update keycloak docker tag to v22
chore(deps): update helm release cilium to v1.16.0
chore(deps): update dependency cilium/cilium to v1.16.0
chore(deps): update helm release cert-manager to v1.15.2
2024-11-17 17:03:27 +01:00
Vegard Hagen
25f977126b
fix(cert): ask for cert for both *.stonegarden.dev and stonegarden.dev
...
try to bypass letsenrypt rate-limiting for exact set of domains
2024-11-17 17:03:27 +01:00
Vegard Hagen
ba2ab6435b
chore(cleanup): Cleanup after cluster rebuild
2024-11-17 17:03:27 +01:00
Vegard Hagen
1c602200c7
chore(pv): consistent naming scheme
2024-11-17 17:03:27 +01:00
Vegard Hagen
69d56e8e71
feat: install Netbird as a VPN solution
...
Also configure Netbird OIDC client in Keycloak using Crossplane
2024-11-17 17:03:27 +01:00
Vegard Stenhjem Hagen
935a13038c
fix(remark42): correct url
...
Wrong URL used from the old cluster. Made it impossible to log in due to a wrong redirect URL.
2024-11-17 17:03:27 +01:00
Vegard Hagen
e2e30a91e2
fix: bind prometheus operator to same node with volume
...
No shared volumes (yet), so have to bind deployment to the node with the volume
2024-11-17 17:03:27 +01:00
Vegard Hagen
c4ba7120dd
feat(tofu): updated kubernetes setup
...
tried to to some tidying while writing an article based on the current
setup.
2024-11-17 17:03:27 +01:00
Vegard Hagen
0a265cbfd5
fix: crossed-wires in Plex and Jellyfin
2024-11-17 17:03:26 +01:00
Vegard Hagen
605e5ef181
fix: increase cpu and mem limits for Argo CD and cloudflared
...
This will hopefully alleviate issues with syncing and routing apparently hanging sometimes
2024-11-17 17:03:26 +01:00
Vegard Hagen
4cb40d3282
feat: configure keycloak using crossplane provider
2024-11-17 17:03:26 +01:00
Vegard Hagen
76ab7a71a2
feat: add crossplane.io
...
Planning to use Crossplane to declaratively create OIDC-clients for Keycloak
2024-11-17 17:03:26 +01:00
Vegard Hagen
628bdb53d6
feat(auth): add keycloak for auth
2024-11-17 17:03:26 +01:00
renovate[bot]
4d47d1c972
chore(deps): merge renovate PRs
...
chore(deps): update helm release node-feature-discovery to v0.16.3
chore(deps): update helm release argo-cd to v7.3.9
chore(deps): update dependency cilium/cilium to v1.15.7
chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.30.0
chore(deps): update terraform proxmox to v0.61.1
chore(deps): update sealed-secrets docker tag to v2.4.2
2024-11-17 17:03:16 +01:00
Vegard Hagen
be08e101b2
feat: configure renovate
2024-07-22 01:05:36 +02:00
Vegard Hagen
c80528ffbd
chore: switch remodelling to main-branch
2024-07-21 23:40:10 +02:00
Vegard Hagen
207b1892bf
feat: cleanup of remodelling
...
move remodel folder down to root and delete old unused manifests
2024-07-21 23:21:12 +02:00
Vegard Hagen
f1797c94ec
feat(monitoring): install kube-prometheus-stack
2024-07-21 23:20:31 +02:00
Vegard Hagen
4d2fe610e2
fix(proxmox-csi-plugin): fetch from Helm chart
2024-07-21 23:20:31 +02:00
Vegard Hagen
1eafca98b5
chore: enable Cilium Hubble
2024-07-21 23:20:31 +02:00
Vegard Hagen
7c492be433
chore: switch Argo CD over to main domain
2024-07-21 23:20:30 +02:00
Vegard Hagen
aa6af35f48
feat: routes to cluster external services
...
Routes to Home Assistant, Proxmox and TrueNAS
2024-07-21 23:20:30 +02:00
Vegard Hagen
482c0368ea
fix: stonegarden routing
...
added a listener for stonegarden.dev
2024-07-21 23:20:30 +02:00
Vegard Hagen
2c1e894af0
fix: media player services
...
Correct labels and svc type
2024-07-21 23:20:30 +02:00
Vegard Hagen
bca0889c47
fix(cloudflared): correct routing to homepage
2024-07-21 23:20:30 +02:00
Vegard Hagen
bf5f26da5a
chore: restore remark42 backup
2024-07-21 23:20:30 +02:00
Vegard Hagen
32cee0d16e
chore: move from euclid sub-domain to main domain
2024-07-21 23:20:30 +02:00
Vegard Hagen
731a16baf3
feat(homepage): add homepage and blog
...
Add Vue Homepage, Hugo blog and Remark 42 for comments
2024-07-21 23:20:30 +02:00
Vegard Hagen
3edf3260d6
feat(media): add media players
...
Adding both Plex and Jellyfin media players
2024-07-21 23:20:29 +02:00
Vegard Hagen
7780078984
chore(tofu): don't use variables for nodes and volumes in main module
2024-07-21 23:20:29 +02:00
Vegard Hagen
ac16aed3d2
feat: add node-feature-discovery and intel-device-plugins
...
label nodes with features to enable e.g. Intel iGPU support
2024-07-21 23:20:29 +02:00
Vegard Hagen
bd7ae1f091
feat(arr): implement arr stack
...
lidarr, prowlarr, radarr, sonarr, torrent
2024-07-21 23:20:29 +02:00
Vegard Hagen
d7f90f34e1
fix: configure gateway
...
also add a cluster-issuer for ingresses
2024-07-21 23:20:29 +02:00
Vegard Hagen
127290d99b
feat(network): add cloudflared
...
encrypted tunnel to cloudflare
2024-07-21 23:20:29 +02:00
Vegard Hagen
f65eb23cc5
fix: proxmox-csi-plugin configuration
...
Missing volumes attributes
2024-07-21 23:20:29 +02:00
Vegard Hagen
f39dc98104
fix(talos): upgrading now actually works without destroying the cluster
...
Use only one pve_download_file resource and key it to <node>_<schematic-id>_<version>
2024-07-21 23:20:29 +02:00
Vegard Hagen
29f5ce8b14
feat(talos): generate schematic id on-the-fly and add possibility of changing image
...
Utilize Talos Factory API to generate schematic ID which can be used to download images
Add possibility of running two different images in cluster. This allows changing version or schematic for the cluster in place
2024-07-21 23:20:28 +02:00
Vegard Hagen
805ab61017
feat: add Gateway API and Gateways
2024-07-21 23:20:28 +02:00
Vegard Hagen
fe368b937e
feat: add Cert-manager
2024-07-21 23:20:28 +02:00
Vegard Hagen
7a946e3e23
feat(volumes): provision volumes using tofu
...
Declaratively provision Proxmox backend persistent volumes for Kubernetes using the Proxmox REST API
2024-07-21 23:20:28 +02:00
Vegard Hagen
677cf79d6c
chore(argocd): set resources for components
2024-07-21 23:20:28 +02:00
Vegard Hagen
8c5389c31c
feat(talos): Bootstrap Cilium from ConfigMap
...
Start adding infrastructure manifests
2024-07-21 23:20:28 +02:00
Vegard Hagen
daaafc8fea
feat(tofu): split into multiple configurations
2024-07-21 23:20:28 +02:00