chrisfu
5dcd3b9581
ansible: treat /var/lib/rancher as local K3s state
...
Update inventory/roles to keep K3s state on local storage and prevent iSCSI from managing /var/lib/rancher.
Also add a single-host k3s install playbook, a systemd override template, and docs describing the installer ↔ Ansible boundary and slow-storage knobs.
Co-authored-by: Junie <junie@jetbrains.com>
2026-03-15 23:20:55 -07:00
chrisfu
436c6214df
checkpoint: k3s agent config + node labels + registry optimizations
...
- k3s: render server-only config keys only for servers; add regression test; make guardrail test non-sudo
- k3s/site: add post-provision node labeling tasks + playbook tier; extend inventory node label mapping
- registry: default namespace to common-services and skip redundant image pushes by probing registry manifests (installer + init scripts)
2026-03-07 03:14:26 -08:00
chrisfu
ec8a4e98af
k3s: Fix installation hangs, CA mismatches, and arm64 networking
...
- Implement proactive CA hash verification and automated repair for mismatches
- Ensure agents prioritize discovered server tokens over stale vault values
- Fix K3s service hangs with explicit stop and killall before reinstall
- Add Retropie/Pi networking fixes (WiFi power save, wlan0 priority)
- Pin pre-staged images to stable, architecture-aware versions (arm64)
- Remove obsolete init-port-forwards and prole.cfg sync tasks
- Update k8s manifests and installer core logic with new tests
2026-02-16 23:30:27 -08:00
chrisfu
f47c18fef7
feat(infrastructure): enhance k3s automation and OpenTofu integration
...
- Infrastructure:
- Updated k3s Ansible role with mountpoint preflight checks and better permission management.
- Automated deployment of prole configuration and port-forwarding scripts to cluster hosts.
- Added systemd service for managing port forwards on k3s nodes.
- Added prole-installer service account token automation.
- K8s Manifests:
- Renamed and added Persistent Volumes in iscsi-pvs.yaml (including OpenBao support).
- Updated StatefulSets for garage and openbao.
- Migrated prole-db to CloudNativePG-based configuration.
- Added comprehensive OpenTofu manifests for cluster deployment.
- Configuration:
- Added cluster-specific configurations (k3d, k3s-hosts).
- Added PostgreSQL configuration templates.
- Updated .gitignore to track the conf/ directory.
- Tools:
- Updated install.py and port-forwarding scripts.
- Added render_manifest.py for manifest generation.
2026-02-07 22:53:18 -08:00
chrisfu
453ccfd015
Add k3s kubeconfig user configuration and iSCSI target defaults
2026-01-27 21:46:56 -08:00
chrisfu
37156086aa
ansible stable
2026-01-26 18:56:17 -08:00
chrisfu
79515fb0ec
fix LUN PROLE-PI-2 iqn
2026-01-26 16:55:56 -08:00
chrisfu
035d63090c
Fix Ansible YAML parsing errors and standardize host_vars. Removed invalid '---' document separators from host_vars files, merged redundant myrddin config, and renamed host_vars to use .yml extension. Verified with successful ansible-playbook --syntax-check.
2026-01-25 23:36:25 -08:00
chrisfu
ff1150fa9e
add iscsi mount guardrails. get k3s server token script
2026-01-25 22:18:10 -08:00
chrisfu
20d408ff36
add iscsi role and vault
2026-01-25 15:31:33 -08:00
chrisfu
5cb2dbdc57
fix k3s role
2026-01-25 06:00:38 -08:00
chrisfu
7c25d731ce
/var/log/pihole SAN mounted
2026-01-25 05:33:40 -08:00
chrisfu
b250d17a93
added iscsi role, ensure /var/lib/rancher storage is mounted before k3s
2026-01-25 01:26:07 -08:00
