a45fe0c9f9
feat(calico): set tolerations for typha "CriticalAddonsOnly"
...
!23
2024-02-03 14:39:34 +09:30
623d178196
fix(config): set external ip if set or node ip if not set
...
!23
2024-02-03 14:38:01 +09:30
45863ecff3
feat(config): for server self. use internal ip to connect instead of external
...
!17
2024-02-02 14:09:13 +09:30
b43e1dbb80
feat(config): dont set external-ip if it matches node-ip
...
!17
2024-02-02 14:08:39 +09:30
efba1ff6c7
feat(config): set value node-ip
...
!17
2024-02-02 14:07:57 +09:30
b350b2e188
refactor(config): use jinja to construct data then pretty print it
...
this way is better as you don't have to worry about the doc changing unless theres a new key.
!17
2024-02-01 23:17:08 +09:30
2e136ee088
feat(calico): use vxlan instead of ipip
...
as serviceLB is not used and vxlan faster. this switch is required.
!17
2024-02-01 19:12:21 +09:30
384ef924ca
feat(olm): uninstall olm if tag olm_uninstall specified
...
!17
2024-02-01 18:33:18 +09:30
26c0ab1236
feat(cni): enable eBPF
...
!17
2024-01-31 06:07:47 +09:30
be1ddecc33
feat(metallb): MetalLB Installable instead of ServiceLB
...
!17
2024-01-31 06:04:56 +09:30
8919486b6b
feat(firewall): add required rules for calico operator
...
!17
2024-01-30 19:07:20 +09:30
5ffbd78e2b
fix(new_cluster): correct config for new cluster install
...
!17
2024-01-30 19:04:34 +09:30
988b91f85a
chore: fix filename
...
!17
2024-01-30 19:01:47 +09:30
f48f645468
feat(calico_operator): deploy the operator to configure calico cni
...
!17 fixes #3
2024-01-29 21:52:28 +09:30
e1220b0dac
feat(install): enable k3s module metrics-server
...
!16
2023-12-29 15:27:23 +09:30
60f7c2d6b6
feat(calico): disable vxlan
...
!16
2023-12-23 02:52:06 +09:30
a54fbe26f3
feat(calico): use vxlan overlay
...
/assign @jon_nfc
/spend 6h
!16
2023-12-22 23:01:01 +09:30
0bdd5c66c2
feat(calico): IP AUTO-detection set to kubernetes-internal-ip
...
!14
2023-12-06 22:31:59 +09:30
ea38ddf22b
fix(audit_log): max age not backup
...
!12
2023-11-30 15:46:17 +09:30
4a41f7e348
feat(config): set node name to inventory_hostname
...
!12 nofusscomputing/infrastructure/configuration-management/project-production!7
2023-11-30 15:44:51 +09:30
a31837c803
feat(firewall): add vxlan rules
...
!12
2023-11-29 20:01:13 +09:30
7369163195
feat(audit_logs): keep two days by default
...
!12
2023-11-29 19:36:12 +09:30
59699afb44
feat(firewall): allow hosts external IP
...
!12
2023-11-29 19:36:12 +09:30
56bb4557b5
fix(config): ensure server var is list not csv string
...
!11 nofusscomputing/infrastructure/configuration-management/project-production!5
2023-11-27 01:16:33 +09:30
7d81b897ff
revert: ensure join token is included in config
...
token within the config is only required for running via cli, not service.
!11
2023-11-27 01:03:37 +09:30
301ed9ad3f
fix(config): ensure join token is included in config
...
!11 nofusscomputing/infrastructure/configuration-management/project-production!5
2023-11-26 23:10:08 +09:30
4ce5f37223
fix(multi-master): ensure that all master nodes are added during config
...
!11 nofusscomputing/infrastructure/configuration-management/project-production!5
2023-11-24 14:40:44 +09:30
58a95e6781
refactor(node_labels): removed from config.yaml and set to be a manifest on prime node
...
this also removes the restriction of not being able to set `node-role` label.
!10 nofusscomputing/infrastructure/configuration-management/project-production!4
2023-11-19 16:06:01 +09:30
c41e12544b
fix(k3s_multi_master): adjusted config so multi-master install works
...
!9 nofusscomputing/infrastructure/configuration-management/project-production!4
2023-11-18 03:53:39 +09:30
ed1a1acf7e
fix(firewall): if host value enpty, don't create rule
...
!9 nofusscomputing/infrastructure/configuration-management/project-production!4
2023-11-17 23:07:25 +09:30
59a5e0aacf
fix(kubelet_args): ensure correct indentation for kubelet args
...
!9 nofusscomputing/infrastructure/configuration-management/project-production!4
2023-11-17 20:48:54 +09:30
20dae6ba4d
fix(node_labels): ensure correct indentation for label list
...
!9 nofusscomputing/infrastructure/configuration-management/project-production!4
2023-11-17 20:42:26 +09:30
fac3ace5f5
fix(config): ensure config option servicelb-namespace only deployed to prime node
...
!8 #12
2023-11-13 22:23:24 +09:30
1a0407a901
refactor(config): only populate cluster-domain if defined
...
!7 closes #12
2023-11-13 17:33:41 +09:30
c7cd1da431
feat(config): support setting node labels
...
!7 #12
2023-11-13 17:32:47 +09:30
cdc06363aa
feat(config): support setting the service
...
!7 #12
2023-11-13 17:30:31 +09:30
34432433f3
feat(config): support setting the cluster domain
...
!7 #12
2023-11-13 17:25:53 +09:30
59f50d53df
feat(rbac): new cluster role and binding ingress-admin
...
!6
2023-11-04 20:42:29 +09:30
f09737b21f
fix(config): typo in config template
...
!6
2023-11-04 18:30:57 +09:30
6ab17bdc3c
fix(rbac): authorization:namespace:owner ns owner not to remove cluster resources
...
!6
2023-11-04 18:26:25 +09:30
5278a4996e
fix(config): server attribute not required for prime master node
...
!6
2023-11-03 14:21:45 +09:30
d2081284d1
feat(config): configurabl system reserved cpu,memory,storage
...
!6
2023-11-02 20:16:51 +09:30
9c4204751e
fix(firewall): use correct chain name
...
!5 #2
2023-11-02 16:22:17 +09:30
4d9f9dcdff
refactor: use kubernetes_config for cluster config
...
!5
2023-11-02 15:54:47 +09:30
ba59dd3057
fix(firewall): correct rules so that kubernetes hosts are added to firewall allowed hosts
...
!5 #2
2023-11-02 15:20:12 +09:30
fd547a4c0f
feat(install): install worker nodes
...
!5 #2
2023-11-02 13:43:54 +09:30
50f48ab5a1
refactor(template): config.yaml rearranged orderd, and updated for kube role
...
!5
2023-11-02 10:30:19 +09:30
1b62a66632
fix(config): cluster-init only required for master nodes
...
!5
2023-11-02 09:35:09 +09:30
abc01ce48c
feat(config): enable configering etc cron and retention
...
!4
2023-10-31 14:18:05 +09:30
bbfbbedd11
docs: initial docs for rbac
...
!2 #4
2023-10-29 14:50:19 +09:30
