Commit Graph
100 Commits
Author SHA1 Message Date
2martens b9c91f9f97 No longer add network policies on cluster setup 2023-11-18 12:44:04 +01:00
2martens 795a5c65c0 Enabled chainingMode portmap 2023-11-18 11:14:04 +01:00
2martens 17cf774971 Allow VXLAN connectivity 2023-11-18 09:16:24 +01:00
2martens d2e00c33f3 Disable wellKnownIdentities 2023-11-18 09:16:12 +01:00
2martens e24558d102 Allow hcloud namespace for vault 2023-11-18 09:16:00 +01:00
2martens 575e61809b Don't include token via Terraform 2023-11-17 22:01:38 +01:00
2martens 8963cd7212 Properly configured thanos 2023-11-17 17:22:35 +01:00
2martens 7713371562 Fixed cluster-setup-values.yaml 2023-11-17 17:16:39 +01:00
2martens a564724199 Fixed microk8s config 2023-11-17 17:07:46 +01:00
2martens ba8a1553f5 Try installing kernel via packages in cloud init script 2023-11-17 17:04:33 +01:00
2martens 4f467da9a1 Added missing sysctl-setup.sh file 2023-11-17 16:58:41 +01:00
2martens b905091315 Removed invalid label 2023-11-17 16:48:08 +01:00
2martens bbb7a150ed Force recreate of manager node 2023-11-17 16:46:54 +01:00
2martens 332c62f6cd Use host network stack 2023-11-17 16:46:15 +01:00
2martens 28e8c821ff Enable cilium network policies for argocd and enabled ingress 2023-11-17 09:40:36 +01:00
2martens acf15da58c Enable host firewall and hubble relay/ui 2023-11-16 22:09:23 +01:00
2martens aa68fdbaf8 Don't use native routing 2023-11-16 21:50:22 +01:00
2martens b3f426aa60 Do not provide native routing cidr 2023-11-16 21:47:27 +01:00
2martens 50a7cef92f Enable masquerade to enable BPF host routing 2023-11-16 21:39:54 +01:00
2martens f922ff6ebc Removed labels 2023-11-16 14:34:06 +01:00
2martens 41812acd69 Add tag to network and subnet 2023-11-16 14:22:27 +01:00
2martens c5965ad7ab Add tag to servers 2023-11-16 14:19:36 +01:00
2martens 0c1ad0ff49 Use native routing 2023-11-15 23:12:33 +01:00
2martens e2db2e1278 Enable delete protection for network 2023-11-15 23:07:27 +01:00
2martens d7937de65f Removed ingress and cert-manager addons 2023-11-15 22:43:45 +01:00
2martens 40d94bc7e4 Correctly escape 2023-11-15 22:43:25 +01:00
2martens 29a9a8e1ba Escape $ symbol 2023-11-15 22:41:25 +01:00
2martens 71d95ebdf2 Install cilium directly from Helm, not as addon
Also install cert-manager directly from Helm to enable experimental Gateway API support.
2023-11-15 22:40:01 +01:00
2martens 1a2bb5adb3 Install newer kernel 2023-11-15 22:38:39 +01:00
2martens ebb20cfa01 Allow further ports required for metrics 2023-11-15 22:38:24 +01:00
2martens 63522a30fb Allow cilium ports 2023-11-15 14:03:39 +01:00
2martens 1ea29413c9 Enable cilium 2023-11-15 13:35:18 +01:00
2martens 636a744e81 Added args to provide authentication/authorization for kube scheduler and kube controller manager 2023-11-09 09:30:29 +01:00
2martens ba98adb1fe Enable scraping kube-proxy metrics 2023-11-09 09:20:14 +01:00
2martens 8ec9cd8d3f Added 10901 port to firewall 2023-11-09 09:07:24 +01:00
2martens f5fdfb1326 Added sysctl config to support cis-hardening 2023-11-08 22:32:19 +01:00
2martens a4772ee450 Set missing name key 2023-11-07 09:22:54 +01:00
2martens 71c739ced5 Added thanos options to terraform 2023-11-07 08:28:08 +01:00
2martens 361e47bcee Fixed name 2023-11-06 22:51:36 +01:00
2martens 0120b80c6c Add new domain 2023-11-06 22:50:19 +01:00
2martens 09ddd2f454 Added hcloud token to terraform 2023-11-06 18:07:21 +01:00
2martens 4465165da0 Removed argocd_version and obsolete variables passed for the workers 2023-11-06 08:07:39 +01:00
2martens 990f479bd2 Don't install vault-secrets-operator with terraform 2023-11-06 08:02:30 +01:00
2martens 13d8ca1e7f Provide variables file for non-ha argo cd as well 2023-11-06 07:56:47 +01:00
2martens d38d3f12c3 Turned allowed namespaces into variable 2023-11-06 07:54:51 +01:00
2martens 7b1822f242 Add application namespaces to cluster setup values 2023-11-05 13:08:38 +01:00
2martens ad537631ff Remove route 2023-11-05 12:16:32 +01:00
2martens 1bf7aceebc Remove server again 2023-11-05 12:12:33 +01:00
2martens 83413b72e9 Remove server from output but reinstate itself 2023-11-05 12:10:52 +01:00
2martens b38c5f72df Remove obsolete resources 2023-11-05 12:08:29 +01:00
2martens bff33fae14 Install vault secrets operator as part of cluster setup 2023-11-05 11:13:38 +01:00
2martens bc9f696556 Install vault secrets operator as part of cluster setup 2023-11-05 11:12:20 +01:00
2martens 7cd1da298a Modified outputs 2023-11-05 10:55:46 +01:00
2martens bac3e0c171 Changed IPs for domains 2023-11-05 10:54:10 +01:00
2martens 6f67881b0f Fixed cluster setup 2023-11-05 09:54:18 +01:00
2martens 38ca40297a Install addons by foot 2023-11-04 23:56:10 +01:00
2martens 4b5ed66315 Ensure workers can join by adding cis-hardening 2023-11-04 23:54:52 +01:00
2martens 60c208ce74 Fix URL to community repo 2023-11-04 23:53:05 +01:00
2martens 499bdea97d Use admin user correctly 2023-11-04 23:46:05 +01:00
2martens 2dc40af54e Fix copy of client config 2023-11-04 23:45:48 +01:00
2martens be9d2f0def Use version 0.1.1 for ArgoCD chart 2023-11-04 23:18:48 +01:00
2martens e4ffd77ba2 Set kube config to 600 2023-11-04 23:10:23 +01:00
2martens d18290c687 Install normal helm and provide config for kubectl in admin user home directory 2023-11-04 23:09:03 +01:00
2martens 7c7d1fca8d Use older version of Argo CD 2023-11-04 23:04:43 +01:00
2martens c04fbb9996 Release name adjusted to match that of microk8s addon 2023-11-04 22:58:21 +01:00
2martens 82fcbafeeb Install argocd in argocd namespace 2023-11-04 22:47:04 +01:00
2martens 654cee645d Use sudo for installing cluster setup 2023-11-04 22:43:04 +01:00
2martens 1869fd6cd9 Revert "Remove part about addonRepositories"
This reverts commit 087eac6a5c.
2023-11-04 22:38:55 +01:00
2martens feba19b8dc Add user to microk8s group 2023-11-04 22:36:46 +01:00
2martens 60897fa08a Use helm 3 2023-11-04 22:30:49 +01:00
2martens 087eac6a5c Remove part about addonRepositories 2023-11-04 22:27:46 +01:00
2martens b4c6d4822b Wait for microk8s before attempting to install further things 2023-11-04 22:21:04 +01:00
2martens 79bf4db13f Added cluster again 2023-11-04 22:09:44 +01:00
2martens 7bedc86e34 Remove cluster 2023-11-04 22:08:15 +01:00
2martens d5255a0eab Fixed launch configuration 2023-11-04 22:07:47 +01:00
2martens 442eae5925 Use non-strict confinement snap version 2023-11-04 21:59:14 +01:00
2martens 0711ab8f68 Install snapcraft with classic confinement 2023-11-04 21:54:14 +01:00
2martens ec6e37d6de Use tmpfiles.d for snap directory 2023-11-04 21:45:33 +01:00
2martens 386cbee586 Enable cluster again 2023-11-04 21:44:14 +01:00
2martens fbfd298fe3 Fix connect order 2023-11-04 21:37:39 +01:00
2martens f981a5c84d Delete cluster 2023-11-04 21:36:14 +01:00
2martens 590bcd8cef Install missing snapcraft 2023-11-04 21:29:50 +01:00
2martens a701a70775 Use content snap 2023-11-04 21:25:20 +01:00
2martens b8ba8c3146 Fixed path 2023-11-04 21:02:36 +01:00
2martens 20ff391287 Use config path that must work 2023-11-04 21:01:39 +01:00
2martens b641ffe993 Set refresh times for snap 2023-11-04 20:51:49 +01:00
2martens c6b6023094 Try launch configuration as non-hidden file 2023-11-04 20:44:37 +01:00
2martens 3a424d359f Fix commands for helm 2023-11-04 20:33:30 +01:00
2martens 9b616faae5 Fixed path for cluster setup 2023-11-04 20:26:01 +01:00
2martens dadc8925ae Use apt-get 2023-11-04 20:21:47 +01:00
2martens 55960b60af Fix copy statement 2023-11-04 20:21:12 +01:00
2martens 9fc9a47e81 Defer write_files 2023-11-04 20:14:53 +01:00
2martens bf85ff0bf8 Enable cluster again 2023-11-04 19:53:17 +01:00
2martens ac87dd9915 Remove cluster 2023-11-04 19:51:37 +01:00
2martens 25c9aefea8 Try saving files in existing tmpfile directory 2023-11-04 19:32:06 +01:00
2martens 38df9786b1 Add cluster again 2023-11-04 19:21:45 +01:00
2martens 857996a883 Delete server again 2023-11-04 19:17:45 +01:00
2martens 5a2475f1f5 Force recreate on user data change 2023-11-04 19:15:12 +01:00
2martens 6c89fc6646 Fixed cloud init scripts 2023-11-04 19:14:27 +01:00
2martens c5be34b7e5 Removed obsolete write_files config 2023-11-04 18:54:39 +01:00