karteekiitg and GitHub
eb15ae041c
refactor: readme, gitignore and talos_machine_config_version changes
...
Signed-off-by: Karteek <[email protected] >
2025-04-17 11:21:38 +02:00
9d7325498a
chore(deps): renovate 2025-03-24
...
chore(deps): update helm release cert-manager to v1.17.1 (#216 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.73.2 (#218 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69.8.2 (#219 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release crossplane to v1.19.0 (#220 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#221 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbird (#222 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbirdio/relay docker tag to v0.39.1 (#223 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release authelia to v0.10.4 (#224 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cilium to v1.17.2 (#225 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cloudflare/cloudflared docker tag to v2025.2.1 (#240 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.2 (#241 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.2 (#242 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.59 (#243 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release argo-cd to v7.8.13 (#244 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release cloudnative-pg to v0.23.2 (#245 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release node-feature-discovery to v0.17.2 (#246 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update keycloak docker tag to v24.4.13 (#247 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.7 (#248 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.13.0 (#249 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.1 (#250 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform kubernetes to v2.36.0 (#251 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/provider-keycloak to v2 (#252 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70 (#253 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 12:17:36 +01:00
Vegard Hagen
94fa06f4bc
refactor(tofu): template extraManifests in talos machine-config
2025-03-23 21:07:26 +01:00
Vegard Hagen
e7ae041021
refactor(tofu): template kubelet args
2025-03-23 20:59:11 +01:00
Vegard Hagen
4c2890c672
feat(tofu): better way of using inlineManifests for bootstrapping Cilium
...
This solves #145
2025-03-23 20:51:16 +01:00
Vegard Hagen
e747d74097
feat(tofu): better way of supplying apiServer arguments
2025-03-23 19:32:56 +01:00
Vegard Hagen
737e047c8e
refactor(tofu): extract variables into their own files
...
The .tfvars files are normally gitignored, but they serve as an example here. Just need to make sure I don't commit a secret...
Inpired by #236
2025-03-23 17:19:46 +01:00
Christopher Macnichol and Vegard Hagen
1cf6031a53
feat(config): added optional variable dns to node configuration
...
Signed-off-by: Christopher Macnichol <[email protected] >
2025-03-23 14:03:37 +01:00
Vegard Hagen
cab677855f
refactor(talos): make talos_machine_config_version an optional parameter
2025-03-23 13:45:42 +01:00
Vegard Hagen
df275c36b3
chore(talos): update machine config version
2025-03-23 12:55:31 +01:00
Vegard Hagen
83e1c95b06
refactor(talos): condensate machine config into two files
...
Signed-off-by: Vegard Hagen <[email protected] >
2025-03-23 12:38:47 +01:00
Karteek and Vegard Hagen
47142aad99
feat: Added provision to provide a VIP for talos cluster
...
refactor: Seperated machine configs
refactor: Made subnet configurable
refactor: Made domain name for oidc configurable
docs: Detailed comments in the code about VIP, endpoints, etc
Signed-off-by: Karteek <[email protected] >
2025-03-23 12:19:17 +01:00
Karteek and Vegard Hagen
2e77f47aec
feat: Enable k8s version tracking(renovate) / upgrades(tofu/shell)
...
Signed-off-by: Karteek <[email protected] >
2025-03-23 11:48:36 +01:00
Karteek and Vegard Hagen
6e26baa532
fix(talos): use factory api to generate schematic ID
...
1. Using a dict instead of set in proxmox_virtual_environment_download_file to maintain consistant order and avoid destroying and recreating resource.
2. Pointing the update_schematic to existing file and added a comment.
3. Reverted to using http api for getting schematic id.
4. Left the official provider code intact and added a comment.
5. Fixed a typo in cert generation comment
Signed-off-by: Karteek <[email protected] >
2025-03-23 11:47:49 +01:00
Vegard Hagen
25cfa2bbb6
chore(gateway): update to gateway api v1.2.1
2025-02-10 20:18:45 +01:00
renovate[bot] and Vegard Hagen
77923604f2
chore(deps): renovate 2025-02-08
...
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68
chore(deps): update helm release argo-cd to v7.8.2
chore(deps): update helm release argo-cd to v7.8.2
chore(deps): update netbird to v0.36.5
chore(deps): update netbirdio/relay docker tag to v0.36.5
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.1
chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.1
chore(deps): update dependency siderolabs/talos to v1.9.3
chore(deps): update keycloak docker tag to v24.4.9
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v68.5.0
chore(deps): update intel device plugins to v0.32.0
chore(deps): update cloudflare/cloudflared docker tag to v2025.2.0
chore(deps): update helm release authelia to v0.9.15
chore(deps): update proxmox-csi-plugin docker tag to v0.3.5
chore(deps): update sealed-secrets docker tag to v2.5.6
chore(deps): update terraform proxmox to v0.70.1
chore(deps): update cilium to v1.17.0
chore(deps): update dependency cert-manager/cert-manager to v1.17.0
chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.11.0
chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.18.4
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69
2025-02-08 22:08:28 +01:00
renovate[bot] and Vegard Hagen
1efb017ef0
chore(deps): renovate 2025-01-26
...
chore(deps): update helm release argo-cd to v7.7.17
chore(deps): update keycloak docker tag to v24.4.6
chore(deps): update helm release node-feature-discovery to v0.17.1
chore(deps): update sealed-secrets docker tag to v2.5.4
chore(deps): update proxmox-csi-plugin docker tag to v0.3.4
chore(deps): update dependency cert-manager/cert-manager to v1.16.3
chore(deps): update dependency siderolabs/talos to v1.9.2
chore(deps): update netbird
chore(deps): update netbirdio/relay docker tag to v0.36.3
chore(deps): update cilium to v1.16.6
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.56
chore(deps): update media containers
chore(deps): update terraform talos to v0.7.1
chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.10.1
chore(deps): update terraform proxmox to v0.70.0
2025-01-26 15:59:50 +01:00
Vegard Hagen
2674d91a48
feat(auth): enable kubectl oidc auth
2025-01-06 21:30:23 +01:00
Vegard Hagen
c9ffd698c8
fix(netbird-agent): allow read root fs and add sysctl
...
The agent seems to assume it's running with full root privileges,
something we don't want. Accommodate by changing manually.
2025-01-05 14:56:24 +01:00
renovate[bot] and Vegard Hagen
668f052356
chore(deps): renovate PRs december 26th
...
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-12-24-debian-rootless
chore(deps): update helm release cert-manager to v1.16.2
chore(deps): update keycloak docker tag to v24.3.1
chore(deps): update terraform proxmox to v0.69.0
chore(deps): update cloudflare/cloudflared docker tag to v2024.12.2
chore(deps): update media containers
chore(deps): update cilium to v1.16.5
chore(deps): update netbird
chore(deps): update helm release argo-cd to v7.7.11
chore(deps): update helm release authelia to v0.9.14
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.55
chore(deps): update helm release crossplane to v1.18.2
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.0
chore(deps): update helm release cloudnative-pg to v0.23.0
chore(deps): update helm release node-feature-discovery to v0.17.0
chore(deps): update dependency siderolabs/talos to v1.9.1
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.0
chore(deps): update proxmox-csi-plugin docker tag to v0.3.0
chore(deps): update sealed-secrets docker tag to v2.5.0
chore(deps): update terraform kubernetes to v2.35.1
chore(deps): update terraform talos to v0.7.0
fix(lldap): correct avatar url
2024-12-26 22:36:44 +01:00
Milos Milosavljevic and Vegard Hagen
1a46529d96
fix(cert-manager): remove deprecated flag
...
cert-manager deprecated flag
Gateway API CRDs
Correction
2024-11-17 17:03:35 +01:00
renovate[bot] and Vegard Hagen
d898ef76e9
chore(deps): renovate bonanza
...
chore(deps): update helm release intel-device-plugins-operator to v0.31.1
chore(deps): update helm release intel-device-plugins-gpu to v0.31.1
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.53
chore(deps): update sealed-secrets docker tag to v2.4.9
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-04-debian-rootless
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.54
chore(deps): update cloudflare/cloudflared docker tag to v2024.11.0
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.17
chore(deps): update helm release authelia to v0.9.9
chore(deps): update helm release cert-manager to v1.16.1
chore(deps): update dependency cilium/cilium to v1.16.3
chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.31.1
chore(deps): update helm release cloudnative-pg to v0.22.1
chore(deps): update dependency umputun/remark42 to v1.14.0
chore(deps): update helm release node-feature-discovery to v0.16.6
chore(deps): update terraform talos to v0.6.1
chore(deps): update dependency siderolabs/talos to v1.8.2
chore(deps): update terraform proxmox to v0.66.3
chore(deps): update helm release argo-cd to v7.7.0
chore(deps): update terraform kubernetes to v2.33.0
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.3.0
chore(deps): update docker.io/mvance/unbound docker tag to v1.22.0
chore(deps): update helm release crossplane to v1.18.0
chore(deps): update media containers
chore(deps): update netbird
chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v5
chore(deps): update helm release coturn to v1
chore(config): migrate config renovate.json
2024-11-17 17:03:35 +01:00
Vegard Hagen
140fbc249b
feat(tofu): use new talos_image_factory_schematic resource
...
talos provider 0.6 added a new resource for generating the image schematic id
2024-11-17 17:03:34 +01:00
renovate[bot] and Vegard Hagen
d291132624
chore(deps): merge renovate PRs
...
chore(deps): update netbird
chore(deps): update helm release crossplane to v1.17.1
chore(deps): update media containers
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.3.0
chore(deps): update helm release argo-cd to v7.6.8
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-10-10-debian-rootless
chore(deps): update proxmox-csi-plugin docker tag to v0.2.13
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.16
chore(deps): update terraform proxmox to v0.66.1
chore(deps): update terraform talos to v0.6.0
chore(deps): update dependency cilium/cilium to v1.16.2
chore(deps): update dependency siderolabs/talos to v1.8.1
2024-11-17 17:03:34 +01:00
renovate[bot] and Vegard Hagen
89c0a27364
chore(deps): merge renovate PRs
...
chore(deps): update helm release node-feature-discovery to v0.16.4
chore(deps): update helm release argo-cd to v7.4.3
chore(deps): update keycloak docker tag to v22.1.1
chore(deps): update dependency umputun/remark42 to v1.13.1
chore(deps): update cloudflare/cloudflared docker tag to v2024.8.2
chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.9
chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.8
chore(deps): update ghcr.io/onedr0p/prowlarr docker tag to v1.21.2
fix(renovate): explicitly set versioning scheme for plex
chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.8.3
chore(deps): update dependency cilium/cilium to v1.16.1
chore(deps): update terraform kubernetes to v2.32.0
chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8854-f36c552fd
chore(deps): update helm release cilium to v1.16.1
2024-11-17 17:03:28 +01:00
renovate[bot] and Vegard Hagen
42c7fe1e12
chore(deps): merge renovate PRs
...
chore(deps): update helm release argo-cd to v7.4.2
chore(deps): update sealed-secrets docker tag to v2.4.5
chore(deps): update terraform proxmox to v0.62.0
chore(deps): update keycloak docker tag to v22
chore(deps): update helm release cilium to v1.16.0
chore(deps): update dependency cilium/cilium to v1.16.0
chore(deps): update helm release cert-manager to v1.15.2
2024-11-17 17:03:27 +01:00
Vegard Hagen
ba2ab6435b
chore(cleanup): Cleanup after cluster rebuild
2024-11-17 17:03:27 +01:00
Vegard Hagen
69d56e8e71
feat: install Netbird as a VPN solution
...
Also configure Netbird OIDC client in Keycloak using Crossplane
2024-11-17 17:03:27 +01:00
Vegard Hagen
c4ba7120dd
feat(tofu): updated kubernetes setup
...
tried to to some tidying while writing an article based on the current
setup.
2024-11-17 17:03:27 +01:00
Vegard Hagen
207b1892bf
feat: cleanup of remodelling
...
move remodel folder down to root and delete old unused manifests
2024-07-21 23:21:12 +02:00