Commit Graph
67 Commits
Author SHA1 Message Date
Vegard Hagen 4f694ce8c5 chore(tofu): run tofu fmt on configuration 2025-04-18 17:28:51 +02:00
Vegard Hagen f47309b3d1 fix(tofu): switching to .tofu extension
Picking sides

No real functional change except the cute tofu icon in my IDE instead of the purple T
2025-04-18 17:19:15 +02:00
Vegard Hagen 1cb8c03fe8 chore(keycloak): remove unused volume 2025-04-18 16:47:00 +02:00
Vegard Hagen 47079ecdfb chore(talos): update talos to 1.9.5
Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 14:50:18 +02:00
renovate[bot]GitHubrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
465b690d15 chore(deps): update dependency siderolabs/talos to v1.9.5 (#282)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-18 14:15:35 +02:00
Vegard Hagen b4922a3d79 feat(tofu): actually update kubernetes when saying so 2025-04-18 14:14:24 +02:00
renovate[bot]GitHubrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
98fa010384 chore(deps): update dependency kubernetes/kubernetes to v1.32.3 (#281)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-18 13:58:07 +02:00
Vegard Hagen e94a97e6f3 feat(tofu): refactor tofu-code
Tidying code and clarifying some sections

Signed-off-by: Vegard Hagen <[email protected]>
2025-04-18 13:56:14 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
266aab34c0 chore(deps): renovate 2025-04-17
chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v7.8.26 (#269)

* chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(tofu): volume-provisioning

A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used

Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}

Also update Mastercard/restapi provider

* chore(deps): update helm release argo-cd to v7.8.26

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Hagen <[email protected]>

chore(deps): update keycloak docker tag to v24.5.2 (#270)

* chore(deps): update terraform proxmox to v0.76.0 (#268)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* fix(tofu): volume-provisioning

A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used

Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}

Also update Mastercard/restapi provider

* chore(deps): update keycloak docker tag to v24.5.2

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Vegard Hagen <[email protected]>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70.7.0 (#271)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.9 (#272)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.4.0 (#273)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#274)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update netbird to v0.41.3 (#275)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3.0.1 (#277)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium to v1.17.3 (#278)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.60 (#279)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.5 (#280)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-17 18:57:50 +02:00
Vegard Hagen 67f160fea1 fix(tofu): volume-provisioning
A Proxmox update probably broke/changed the way API requests are handled, giving errors on UPDATE calls with parameters that aren't used

Error: unexpected response code '400': {"data":null,"errors":{"format":"property is not defined in schema and the schema does not allow additional properties","vmid":"property is not defined in schema and the schema does not allow additional properties","size":"property is not defined in schema and the schema does not allow additional properties","filename":"property is not defined in schema and the schema does not allow additional properties"}}

Also update Mastercard/restapi provider
2025-04-17 18:24:03 +02:00
karteekiitgandGitHub c17687a058 feat: Added docs and sample file to use remote GCS backend. (#260)
Signed-off-by: Karteek <[email protected]>
2025-04-17 11:26:32 +02:00
karteekiitgandGitHub eb15ae041c refactor: readme, gitignore and talos_machine_config_version changes
Signed-off-by: Karteek <[email protected]>
2025-04-17 11:21:38 +02:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
341fba89fa chore(deps): renovate 2025-03-30
chore(deps): update netbird to v0.39.2 (#265)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.8 (#264)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.74.0 (#263)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release crossplane to v1.19.1 (#262)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v7.8.15 (#261)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70.3.0 (#259)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#258)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-30 16:16:32 +02:00
Vegard Hagen 481b224f22 feat(authelia): upgrade to 4.39 and fix OIDC configuration
Signed-off-by: Vegard Hagen <[email protected]>
2025-03-30 15:48:12 +02:00
Vegard Hagen 057b203214 fix(jellyfin): recover jellyfin data
something went wrong when mounting the disk, trying to mount a copy of a zfs snapshot

Signed-off-by: Vegard Hagen <[email protected]>
2025-03-24 18:44:09 +01:00
renovate[bot]Vegard Hagenrenovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
9d7325498a chore(deps): renovate 2025-03-24
chore(deps): update helm release cert-manager to v1.17.1 (#216)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform proxmox to v0.73.2 (#218)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69.8.2 (#219)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release crossplane to v1.19.0 (#220)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update media containers (#221)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update netbird (#222)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update netbirdio/relay docker tag to v0.39.1 (#223)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release authelia to v0.10.4 (#224)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cilium to v1.17.2 (#225)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update cloudflare/cloudflared docker tag to v2025.2.1 (#240)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.2 (#241)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.2 (#242)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.59 (#243)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release argo-cd to v7.8.13 (#244)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release cloudnative-pg to v0.23.2 (#245)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update helm release node-feature-discovery to v0.17.2 (#246)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update keycloak docker tag to v24.4.13 (#247)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update sealed-secrets docker tag to v2.5.7 (#248)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.13.0 (#249)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.1 (#250)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update terraform kubernetes to v2.36.0 (#251)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency crossplane-contrib/provider-keycloak to v2 (#252)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70 (#253)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 12:17:36 +01:00
Vegard Hagen 94fa06f4bc refactor(tofu): template extraManifests in talos machine-config 2025-03-23 21:07:26 +01:00
Vegard Hagen e7ae041021 refactor(tofu): template kubelet args 2025-03-23 20:59:11 +01:00
Vegard Hagen 4c2890c672 feat(tofu): better way of using inlineManifests for bootstrapping Cilium
This solves #145
2025-03-23 20:51:16 +01:00
Vegard Hagen e747d74097 feat(tofu): better way of supplying apiServer arguments 2025-03-23 19:32:56 +01:00
Vegard Hagen 737e047c8e refactor(tofu): extract variables into their own files
The .tfvars files are normally gitignored, but they serve as an example here. Just need to make sure I don't commit a secret...

Inpired by #236
2025-03-23 17:19:46 +01:00
Christopher MacnicholandVegard Hagen 1cf6031a53 feat(config): added optional variable dns to node configuration
Signed-off-by: Christopher Macnichol <[email protected]>
2025-03-23 14:03:37 +01:00
Vegard Hagen cab677855f refactor(talos): make talos_machine_config_version an optional parameter 2025-03-23 13:45:42 +01:00
Vegard Hagen df275c36b3 chore(talos): update machine config version 2025-03-23 12:55:31 +01:00
Vegard Hagen 83e1c95b06 refactor(talos): condensate machine config into two files
Signed-off-by: Vegard Hagen <[email protected]>
2025-03-23 12:38:47 +01:00
KarteekandVegard Hagen 47142aad99 feat: Added provision to provide a VIP for talos cluster
refactor: Seperated machine configs

refactor: Made subnet configurable

refactor: Made domain name for oidc configurable

docs: Detailed comments in the code about VIP, endpoints, etc

Signed-off-by: Karteek <[email protected]>
2025-03-23 12:19:17 +01:00
KarteekandVegard Hagen 2e77f47aec feat: Enable k8s version tracking(renovate) / upgrades(tofu/shell)
Signed-off-by: Karteek <[email protected]>
2025-03-23 11:48:36 +01:00
KarteekandVegard Hagen 6e26baa532 fix(talos): use factory api to generate schematic ID
1. Using a dict instead of set in proxmox_virtual_environment_download_file to maintain consistant order and avoid destroying and recreating resource.
2. Pointing the update_schematic to existing file and added a comment.
3. Reverted to using http api for getting schematic id.
4. Left the official provider code intact and added a comment.
5. Fixed a typo in cert generation comment

Signed-off-by: Karteek <[email protected]>
2025-03-23 11:47:49 +01:00
Vegard Hagen 25cfa2bbb6 chore(gateway): update to gateway api v1.2.1 2025-02-10 20:18:45 +01:00
renovate[bot]andVegard Hagen 77923604f2 chore(deps): renovate 2025-02-08
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68

chore(deps): update helm release argo-cd to v7.8.2

chore(deps): update helm release argo-cd to v7.8.2

chore(deps): update netbird to v0.36.5

chore(deps): update netbirdio/relay docker tag to v0.36.5

chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.1

chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.1

chore(deps): update dependency siderolabs/talos to v1.9.3

chore(deps): update keycloak docker tag to v24.4.9

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68.5.0

chore(deps): update intel device plugins to v0.32.0

chore(deps): update cloudflare/cloudflared docker tag to v2025.2.0

chore(deps): update helm release authelia to v0.9.15

chore(deps): update proxmox-csi-plugin docker tag to v0.3.5

chore(deps): update sealed-secrets docker tag to v2.5.6

chore(deps): update terraform proxmox to v0.70.1

chore(deps): update cilium to v1.17.0

chore(deps): update dependency cert-manager/cert-manager to v1.17.0

chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.11.0

chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.18.4

chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69
2025-02-08 22:08:28 +01:00
Vegard Hagen 24743bf9c2 fix(cnpg): rename db volumes 2025-01-26 17:58:36 +01:00
Vegard Hagen e039cf2237 chore(talos): update to v1.9.2 from v1.8.1 2025-01-26 16:34:45 +01:00
renovate[bot]andVegard Hagen 1efb017ef0 chore(deps): renovate 2025-01-26
chore(deps): update helm release argo-cd to v7.7.17

chore(deps): update keycloak docker tag to v24.4.6

chore(deps): update helm release node-feature-discovery to v0.17.1

chore(deps): update sealed-secrets docker tag to v2.5.4

chore(deps): update proxmox-csi-plugin docker tag to v0.3.4

chore(deps): update dependency cert-manager/cert-manager to v1.16.3

chore(deps): update dependency siderolabs/talos to v1.9.2

chore(deps): update netbird

chore(deps): update netbirdio/relay docker tag to v0.36.3

chore(deps): update cilium to v1.16.6

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.56

chore(deps): update media containers

chore(deps): update terraform talos to v0.7.1

chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.10.1

chore(deps): update terraform proxmox to v0.70.0
2025-01-26 15:59:50 +01:00
Vegard Hagen ee741467dd fix(lldap): add tmp-volume for bootstrapping 2025-01-26 15:43:41 +01:00
Vegard Hagen 5563a63f56 feat(lldap): add cnpg database for persistence 2025-01-19 10:24:12 +01:00
renovate[bot]andVegard Hagen ab7a292b60 chore(deps): renovate 2025-01-12
chore(deps): update keycloak docker tag to v24.4.0

chore(deps): update keycloak docker tag to v24.4.0

chore(deps): update terraform proxmox to v0.69.1

chore(deps): update terraform proxmox to v0.69.1

chore(deps): update helm release argo-cd to v7.7.15

chore(deps): update cloudflare/cloudflared docker tag to v2025

chore(deps): update media containers
2025-01-17 15:15:00 +01:00
Vegard Hagen 2674d91a48 feat(auth): enable kubectl oidc auth 2025-01-06 21:30:23 +01:00
Vegard Hagen edd0a15345 fix(authelia): increase db disk size 2025-01-06 21:27:16 +01:00
Vegard Hagen ce5fc25504 feat(authelia): use a cnpg managed db
use a database for presistent storage of users and sessions
2025-01-06 20:14:45 +01:00
Vegard Hagen c9ffd698c8 fix(netbird-agent): allow read root fs and add sysctl
The agent seems to assume it's running with full root privileges,
something we don't want. Accommodate by changing manually.
2025-01-05 14:56:24 +01:00
Vegard Hagen 5ecf061fc3 fix(keycloak): move crossplane-keycloak-credentials to keycloak from crossplane namespace 2025-01-04 09:47:39 +01:00
renovate[bot]andVegard Hagen 668f052356 chore(deps): renovate PRs december 26th
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-12-24-debian-rootless

chore(deps): update helm release cert-manager to v1.16.2

chore(deps): update keycloak docker tag to v24.3.1

chore(deps): update terraform proxmox to v0.69.0

chore(deps): update cloudflare/cloudflared docker tag to v2024.12.2

chore(deps): update media containers

chore(deps): update cilium to v1.16.5

chore(deps): update netbird

chore(deps): update helm release argo-cd to v7.7.11

chore(deps): update helm release authelia to v0.9.14

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.55

chore(deps): update helm release crossplane to v1.18.2

chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.0

chore(deps): update helm release cloudnative-pg to v0.23.0

chore(deps): update helm release node-feature-discovery to v0.17.0

chore(deps): update dependency siderolabs/talos to v1.9.1

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.0

chore(deps): update proxmox-csi-plugin docker tag to v0.3.0

chore(deps): update sealed-secrets docker tag to v2.5.0

chore(deps): update terraform kubernetes to v2.35.1

chore(deps): update terraform talos to v0.7.0

fix(lldap): correct avatar url
2024-12-26 22:36:44 +01:00
Vegard Hagen e48986a5a2 feat(authelia): add kubectl oidc account 2024-12-01 22:33:36 +01:00
Vegard Hagen ffa170117b fix(keycloak): new postgres volume 2024-12-01 21:48:26 +01:00
renovate[bot]andVegard Hagen acd6052af7 chore(deps): merge renovate PRs
chore(deps): update keycloak docker tag to v24

chore(deps): update sealed-secrets docker tag to v2.4.11

chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-17-debian-rootless

chore(deps): update helm release argo-cd to v7.7.3

chore(deps): update netbird to v0.32.0

chore(deps): update dependency siderolabs/talos to v1.8.3

chore(deps): update media containers
2024-11-17 17:03:36 +01:00
Milos MilosavljevicandVegard Hagen 1a46529d96 fix(cert-manager): remove deprecated flag
cert-manager deprecated flag

Gateway API CRDs

Correction
2024-11-17 17:03:35 +01:00
renovate[bot]andVegard Hagen d898ef76e9 chore(deps): renovate bonanza
chore(deps): update helm release intel-device-plugins-operator to v0.31.1

chore(deps): update helm release intel-device-plugins-gpu to v0.31.1

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.53

chore(deps): update sealed-secrets docker tag to v2.4.9

chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-04-debian-rootless

chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.54

chore(deps): update cloudflare/cloudflared docker tag to v2024.11.0

chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.17

chore(deps): update helm release authelia to v0.9.9

chore(deps): update helm release cert-manager to v1.16.1

chore(deps): update dependency cilium/cilium to v1.16.3

chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.31.1

chore(deps): update helm release cloudnative-pg to v0.22.1

chore(deps): update dependency umputun/remark42 to v1.14.0

chore(deps): update helm release node-feature-discovery to v0.16.6

chore(deps): update terraform talos to v0.6.1

chore(deps): update dependency siderolabs/talos to v1.8.2

chore(deps): update terraform proxmox to v0.66.3

chore(deps): update helm release argo-cd to v7.7.0

chore(deps): update terraform kubernetes to v2.33.0

chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.3.0

chore(deps): update docker.io/mvance/unbound docker tag to v1.22.0

chore(deps): update helm release crossplane to v1.18.0

chore(deps): update media containers

chore(deps): update netbird

chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v5

chore(deps): update helm release coturn to v1

chore(config): migrate config renovate.json
2024-11-17 17:03:35 +01:00
Vegard Hagen 140fbc249b feat(tofu): use new talos_image_factory_schematic resource
talos provider 0.6 added a new resource for generating the image schematic id
2024-11-17 17:03:34 +01:00
Vegard Hagen 996bf85daf chore(talos): upgrade last node ctrl-00
Regular 'terraform apply' was enough this time

We're now on Talos 1.8.1 and Kubernetes 1.31.1
2024-11-17 17:03:34 +01:00
Vegard Hagen 4c8066a130 chore(talos): upgrade node ctrl-02
It worked with 'tofu apply -refresh=false'! Still had to manually shut down the VM though. Still scary!
2024-11-17 17:03:34 +01:00