Vegard Hagen
5abde08753
fix: conflicting svc name
2024-11-17 17:03:28 +01:00
Vegard Hagen
e6a8ad12c8
chore(plex): use Memory for /tmp and /transcode
...
Try to fix NodeDiskPressure issue where I think Plex filling up ephemeral storage
2024-11-17 17:03:28 +01:00
Vegard Hagen
dbb66ba93d
chore: rename svc for arr-stack applications
...
Dropping -web postfix since it doesn't mean anything and I think it just clutters
2024-11-17 17:03:28 +01:00
Vegard Hagen
8668f58a38
chore(gateway): update to Gateway API 1.1.0
2024-11-17 17:03:28 +01:00
Vegard Hagen
25f977126b
fix(cert): ask for cert for both *.stonegarden.dev and stonegarden.dev
...
try to bypass letsenrypt rate-limiting for exact set of domains
2024-11-17 17:03:27 +01:00
Vegard Hagen
ba2ab6435b
chore(cleanup): Cleanup after cluster rebuild
2024-11-17 17:03:27 +01:00
Vegard Hagen
1c602200c7
chore(pv): consistent naming scheme
2024-11-17 17:03:27 +01:00
Vegard Hagen
69d56e8e71
feat: install Netbird as a VPN solution
...
Also configure Netbird OIDC client in Keycloak using Crossplane
2024-11-17 17:03:27 +01:00
Vegard Stenhjem Hagen
935a13038c
fix(remark42): correct url
...
Wrong URL used from the old cluster. Made it impossible to log in due to a wrong redirect URL.
2024-11-17 17:03:27 +01:00
Vegard Hagen
e2e30a91e2
fix: bind prometheus operator to same node with volume
...
No shared volumes (yet), so have to bind deployment to the node with the volume
2024-11-17 17:03:27 +01:00
Vegard Hagen
c4ba7120dd
feat(tofu): updated kubernetes setup
...
tried to to some tidying while writing an article based on the current
setup.
2024-11-17 17:03:27 +01:00
Vegard Hagen
0a265cbfd5
fix: crossed-wires in Plex and Jellyfin
2024-11-17 17:03:26 +01:00
Vegard Hagen
605e5ef181
fix: increase cpu and mem limits for Argo CD and cloudflared
...
This will hopefully alleviate issues with syncing and routing apparently hanging sometimes
2024-11-17 17:03:26 +01:00
Vegard Hagen
4cb40d3282
feat: configure keycloak using crossplane provider
2024-11-17 17:03:26 +01:00
Vegard Hagen
76ab7a71a2
feat: add crossplane.io
...
Planning to use Crossplane to declaratively create OIDC-clients for Keycloak
2024-11-17 17:03:26 +01:00
Vegard Hagen
628bdb53d6
feat(auth): add keycloak for auth
2024-11-17 17:03:26 +01:00
Vegard Hagen
be08e101b2
feat: configure renovate
2024-07-22 01:05:36 +02:00
Vegard Hagen
c80528ffbd
chore: switch remodelling to main-branch
2024-07-21 23:40:10 +02:00
Vegard Hagen
207b1892bf
feat: cleanup of remodelling
...
move remodel folder down to root and delete old unused manifests
2024-07-21 23:21:12 +02:00
Vegard Hagen
f1797c94ec
feat(monitoring): install kube-prometheus-stack
2024-07-21 23:20:31 +02:00
Vegard Hagen
4d2fe610e2
fix(proxmox-csi-plugin): fetch from Helm chart
2024-07-21 23:20:31 +02:00
Vegard Hagen
1eafca98b5
chore: enable Cilium Hubble
2024-07-21 23:20:31 +02:00
Vegard Hagen
7c492be433
chore: switch Argo CD over to main domain
2024-07-21 23:20:30 +02:00
Vegard Hagen
aa6af35f48
feat: routes to cluster external services
...
Routes to Home Assistant, Proxmox and TrueNAS
2024-07-21 23:20:30 +02:00
Vegard Hagen
482c0368ea
fix: stonegarden routing
...
added a listener for stonegarden.dev
2024-07-21 23:20:30 +02:00
Vegard Hagen
2c1e894af0
fix: media player services
...
Correct labels and svc type
2024-07-21 23:20:30 +02:00
Vegard Hagen
bca0889c47
fix(cloudflared): correct routing to homepage
2024-07-21 23:20:30 +02:00
Vegard Hagen
bf5f26da5a
chore: restore remark42 backup
2024-07-21 23:20:30 +02:00
Vegard Hagen
32cee0d16e
chore: move from euclid sub-domain to main domain
2024-07-21 23:20:30 +02:00
Vegard Hagen
731a16baf3
feat(homepage): add homepage and blog
...
Add Vue Homepage, Hugo blog and Remark 42 for comments
2024-07-21 23:20:30 +02:00
Vegard Hagen
3edf3260d6
feat(media): add media players
...
Adding both Plex and Jellyfin media players
2024-07-21 23:20:29 +02:00
Vegard Hagen
7780078984
chore(tofu): don't use variables for nodes and volumes in main module
2024-07-21 23:20:29 +02:00
Vegard Hagen
ac16aed3d2
feat: add node-feature-discovery and intel-device-plugins
...
label nodes with features to enable e.g. Intel iGPU support
2024-07-21 23:20:29 +02:00
Vegard Hagen
bd7ae1f091
feat(arr): implement arr stack
...
lidarr, prowlarr, radarr, sonarr, torrent
2024-07-21 23:20:29 +02:00
Vegard Hagen
d7f90f34e1
fix: configure gateway
...
also add a cluster-issuer for ingresses
2024-07-21 23:20:29 +02:00
Vegard Hagen
127290d99b
feat(network): add cloudflared
...
encrypted tunnel to cloudflare
2024-07-21 23:20:29 +02:00
Vegard Hagen
f65eb23cc5
fix: proxmox-csi-plugin configuration
...
Missing volumes attributes
2024-07-21 23:20:29 +02:00
Vegard Hagen
f39dc98104
fix(talos): upgrading now actually works without destroying the cluster
...
Use only one pve_download_file resource and key it to <node>_<schematic-id>_<version>
2024-07-21 23:20:29 +02:00
Vegard Hagen
29f5ce8b14
feat(talos): generate schematic id on-the-fly and add possibility of changing image
...
Utilize Talos Factory API to generate schematic ID which can be used to download images
Add possibility of running two different images in cluster. This allows changing version or schematic for the cluster in place
2024-07-21 23:20:28 +02:00
Vegard Hagen
805ab61017
feat: add Gateway API and Gateways
2024-07-21 23:20:28 +02:00
Vegard Hagen
fe368b937e
feat: add Cert-manager
2024-07-21 23:20:28 +02:00
Vegard Hagen
7a946e3e23
feat(volumes): provision volumes using tofu
...
Declaratively provision Proxmox backend persistent volumes for Kubernetes using the Proxmox REST API
2024-07-21 23:20:28 +02:00
Vegard Hagen
677cf79d6c
chore(argocd): set resources for components
2024-07-21 23:20:28 +02:00
Vegard Hagen
8c5389c31c
feat(talos): Bootstrap Cilium from ConfigMap
...
Start adding infrastructure manifests
2024-07-21 23:20:28 +02:00
Vegard Hagen
daaafc8fea
feat(tofu): split into multiple configurations
2024-07-21 23:20:28 +02:00
Vegard Hagen
fbdccd7731
feat(k8s): multi-node Talos cluster
2024-07-21 23:20:27 +02:00
Vegard Hagen
854b6ce6a2
chore(arr): decomission arr in old cluster
...
arr-stack is now up and running in new Talos-cluster
2024-07-18 15:35:15 +02:00
Vegard Hagen
14f1f5c0e4
chore(cert-manager): Update to 1.15.0
2024-07-07 14:48:17 +02:00
Vegard Hagen
0db54c5fd8
test(plex): Enable Plex again
2024-07-07 14:48:17 +02:00
Vegard Hagen
911cdddd6e
test(plex): Remove deployment and service. Run from Euclid instead.
2024-07-07 14:48:17 +02:00
Vegard Hagen
884fe3bd00
feat(auth): add Keycloak for auth
2024-07-07 14:47:52 +02:00
Vegard Hagen
0b628e1a0d
refactor(networking): Create a separate networking folder
...
First out is the cloudflared resources
2024-05-05 20:39:30 +02:00
Vegard Hagen
08912a6047
refactor(cloudflared): Use a DaemonSet instead of Deployment
2024-05-05 18:51:57 +02:00
Vegard Hagen
d42f97bd4b
refactor(dns):! Remove Pi-Hole and clean up cloudflared tunnel-config
2024-05-05 18:32:30 +02:00
Vegard Hagen
9c4ca70497
chore(haos): Remove 'matches' field
2024-05-01 22:22:08 +02:00
Vegard Hagen
7d79db70e9
feat(jf): Proxy Jellyfin from Euclid instead of Plex
2024-04-28 22:09:32 +02:00
Vegard Hagen
ba5ec8a7d6
feat(plex): Proxy Euclid Plex
2024-04-20 14:17:48 +02:00
Vegard Hagen
4b63ad037f
fix(svc): EndpointSlices should have the same name as the svc
2024-04-19 20:27:44 +02:00
Vegard Hagen
32d97558ec
fix(euclid): Delay qemu-guest-agent startup
...
By delaying the qemu-guest-agent we don't need a sleep function to wait for kubeadm to do its thing
2024-04-17 16:42:06 +02:00
Vegard Hagen
cabdc65448
feat(lgtm): Adding LGTM Helm chart
2024-04-07 18:52:05 +02:00
Vegard Hagen
91998ecc2a
feat(monitoring): Configure kube-prometheus-stack
...
Use Argo CD Application again.
Provision storage.
2024-04-07 14:10:00 +02:00
Vegard Hagen
4efe769396
fix(users): Add kustomization.yaml in users-folder
2024-04-06 18:20:55 +02:00
Vegard Hagen
a9dabe9293
chore(traefik): Update Traefik Helm chart to 27.0.0
2024-04-06 18:19:48 +02:00
Vegard Hagen
0982d5c871
chore(monitoring): Update kube-prometheus-stack Helm chart to 57.2.1
2024-04-06 18:17:16 +02:00
Vegard Hagen
b233ef4873
fix(monitoring): Change the way kube-prometheus-stack is applied
...
Try to use Kustomize instead of an Argo CD application
2024-04-06 18:12:11 +02:00
Vegard Hagen
0b4a1ee0a6
chore(cloudflared): Update Cloudflared image to 2024.3.0
2024-04-06 18:01:39 +02:00
Vegard Hagen
5f8fab9831
chore(cilium): Update Helm chart to 1.15.3
2024-04-06 17:58:24 +02:00
Vegard Hagen
07ccf5745d
chore(cert-manager): Update Helm chart to 1.14.4
2024-04-06 17:56:51 +02:00
Vegard Hagen
7f65434b20
chore(argocd): Update Helm chart to 6.7.10
2024-04-06 17:55:14 +02:00
Vegard Hagen
398b98cfff
feat(Argo CD): Switch to Helm chart
2024-04-06 17:43:53 +02:00
Vegard Hagen and Vegard Stenhjem Hagen
b6b64ab4c4
docs: Clean up README.md
2024-04-05 23:14:31 +02:00
Vegard Hagen and Vegard Stenhjem Hagen
e343d41b85
feat(cloud-init): Kubeadm cluster
...
wip: DNS shenanigans
2024-04-05 23:14:31 +02:00
Vegard Hagen and Vegard Stenhjem Hagen
d035bec693
feat(vm): Start to use Proxmox
2024-04-05 23:14:31 +02:00
Vegard Hagen
25692fd11f
fix(cloudflared): Disable cloudflared
...
I have a hunch it congestes the network
2024-03-10 19:22:06 +01:00
Vegard Hagen
e819f3f26e
fix(dns): Trying with both UDP and TCP on the same Service again
2024-03-09 10:23:19 +01:00
Vegard Hagen
eae119a45c
fix(dns): Don't route non-denfined to Traefik
2024-03-09 09:48:29 +01:00
Vegard Hagen
17a07d4fd8
feat(access): Extra admins in the cluster
2024-03-03 17:55:54 +01:00
Vegard Hagen
ba03da7c4b
fix(gateway): Pinpointed difficulties to be with wildcard
...
hostname: "*.stonegarden.dev" appears to give me some trouble.
It could be that I've done something stupid with the certificates...
again. Maybe a rate limit?
Manually listing all Gateway endpoints and fixing the wildard issue at a
later date.
2024-03-02 23:35:34 +01:00
Vegard Hagen
8e7a87c825
fix(gateway): Regressing to IngressRoutes to get sites working again
2024-03-02 20:58:41 +01:00
Vegard Hagen
4eac6c1f1c
fix(proxmox): TLS Passthrough GW for again
2024-03-02 19:46:54 +01:00
Vegard Hagen
3197f452a2
fix(proxmox): Using Proxmox Service directly
2024-03-02 17:09:21 +01:00
Vegard Hagen
da61e34580
fix(gateway): Create a separate Gateway for Proxmox TLS passthrough
2024-03-02 16:55:05 +01:00
Vegard Hagen
fe9ab18ed0
fix(gateway): Creating a TLS Passthrough listener
2024-03-02 16:47:43 +01:00
Vegard Hagen
54dc229e3e
fix: Cleaning Gateway/HTTPRoute naming
2024-03-02 15:45:51 +01:00
Vegard Hagen
9eeae42921
feat(proxmox): Proxy Euclid Proxmox through Gateway
2024-03-02 15:14:32 +01:00
Vegard Hagen
3c33225e00
feat(haos): Proxy HAOS through k8s for certificate
2024-03-02 11:50:34 +01:00
Vegard Hagen
c6e1aadb16
fix(plex): Use Ingress instead of Gateway
2024-02-18 19:57:04 +01:00
Vegard Hagen
0b1011d0f6
fix(cilium): Announce ARP on all interfaces
2024-02-18 19:37:03 +01:00
Vegard Hagen
f01b32c878
chore(gpu): Disable GPU for Plex and Jellyfin
...
Have to figure out PCI/GPU passthrough in Proxmox before it's turned on again
2024-02-17 20:30:03 +01:00
Vegard Hagen
83b0c98dc6
fix(qBit): Change registry for qBit
2024-01-20 22:10:40 +01:00
Vegard Hagen
daf55205cc
chore(deps): Updating nvidia-device-plugin to 0.14.3
2024-01-15 17:32:58 +01:00
Vegard Stenhjem Hagen
37370e093e
feat(app): Adding Deltahouse application
2024-01-12 18:37:05 +01:00
Vegard Hagen
7c6d24a49f
feat(db): Adding Zalando Postgres-operator
2024-01-08 10:48:17 +01:00
Vegard Hagen
52a3f87dad
feat(hass): Move Home Assistant config to own repo
2024-01-07 20:49:46 +01:00
Vegard Hagen
bfd062a552
fix(monitoring): Add a dedicated traefik-forward-auth for monitoring
2024-01-05 20:29:17 +01:00
Vegard Hagen
79276b05bd
chore(README): Updated README bootstrapping instructions
...
This should hopefully make it easier to get started with a similar setup
2024-01-04 22:06:46 +01:00
Vegard Hagen
563b8e7181
fix(hubble): Move Hubble to it's own folder
2024-01-04 20:49:52 +01:00
Vegard Hagen
1738a24f87
fix(plex): switch back to ingressroute for troubleshooting
2023-12-31 10:48:27 +01:00
Vegard Hagen
812a7e28d6
chore(hass): Update Home Assistant to 2023.12.4
2023-12-30 13:46:25 +01:00
Vegard Hagen
d1ae9a189f
fix(gateway): Removed non-traefik-forward-auth protected Ingresses in favour of HTTPRoutes
2023-12-30 13:32:30 +01:00