8 Commits

Author	SHA1	Message	Date
chrisfu	56806984bc	k3s: stabilize reset/sync and refresh controller kubeconfig ... - k3s_sync: choose any server as sync source fallback; refresh kubeconfig and validate nodes\n- fetch_kubeconfig: save to prole-k3s.kubeconfig and etc/secrets/k3s.kubeconfig\n- k3s sync: sync server URL into config.yaml; restore TLS bundle only on servers\n- cert-manager/ACME: wait for CNI/webhook readiness; retry ClusterIssuer/Certificate apply\n- inventory: tune myrddin control-plane timing args; add render test\n- misc: update port mappings and prole-db manifests/version Co-authored-by: Junie <junie@jetbrains.com>	2026-03-15 12:24:35 -07:00
chrisfu	502f039c0b	Check for prole.cfg existence and conditionally load K3s registry defaults ... - Add `ansible.builtin.stat` task to verify `prole.cfg` availability before loading defaults. - Prevent errors when `prole.cfg` is missing by skipping `lookup` operations.	2026-03-13 02:42:10 -07:00
chrisfu	d397b3000e	Fix installer ctx apply flow and registry namespace ... - Add explicit Apply button for kubectl context switching to avoid half-applied changes - Allow kubeconfig/context-based auth without requiring K3S_TOKEN when kubeconfig is valid - Prompt cleanup/reset of previous Common Core services namespace to prevent resource collisions - Remove hardcoded 'common-services' registry namespace; default registry deploy/check to SERVICE_NAMESPACE/REGISTRY_NAMESPACE - Update mocks and add regression tests for namespace resolution and installer behavior	2026-03-07 10:35:27 -08:00
chrisfu	436c6214df	checkpoint: k3s agent config + node labels + registry optimizations ... - k3s: render server-only config keys only for servers; add regression test; make guardrail test non-sudo - k3s/site: add post-provision node labeling tasks + playbook tier; extend inventory node label mapping - registry: default namespace to common-services and skip redundant image pushes by probing registry manifests (installer + init scripts)	2026-03-07 03:14:26 -08:00
chrisfu	a43aed7134	k3s: eliminate localhost registry + dedupe common-core ... - Ensure k3s mode uses the k3s registry endpoint and avoid localhost/k3d image prefixes. - Make ArgoCD repo-server cmp symlink creation idempotent. - Normalize common-core provisioning to knoe-system and add repair-time dedupe of stray default-namespace installs. - Add k3s MariaDB datastore/refresh playbooks and regression tests.	2026-03-05 14:31:33 -08:00
chrisfu	6e2d3e9011	refactor: modernize installer and monitoring setup ... - Monitoring: Migrated from manual Grafana/Prometheus manifests to kube-prometheus-stack based setup in etc/init_monitoring.sh. Removed old manifest files from deploy/ and k8s/. - Installer Core: Refactored installer with new modules for actions, environment handling, and UI screens. Enhanced Milestone logic to support advanced configuration (ArgoCD, Registry namespaces, Kerberos flags, etc.). - Service & Init Scripts: Updated multiple initialization scripts (init_*.sh) for better integration with OpenBao, Kerberos, and the new monitoring stack. Added new scripts for Nginx Ingress, Ollama parsing, and K3D route fixes. - Infrastructure: Enhanced Samba AD DC Ansible role with realm derivation, provisioning guidance, and group management. Updated K3s role tasks. - Configuration: Refined default settings in conf/ to align with the new deployment architecture. - App & Tools: Updated prole-app Swift code and prole.sh for improved environment variable handling and installation flow.	2026-02-19 21:07:39 -08:00
chrisfu	23cf4ac33d	Configure K3s for retropie and add Traefik Ingress. Updated K3s templates for node-ip/flannel-iface, configured retropie host vars, enabled Traefik, added Ingress resources for Grafana, Prole, Kong, and Supabase, and set Postgres to LoadBalancer.	2026-02-16 04:28:40 -08:00
chrisfu	5ae0c0bcb9	k3s_sync task	2026-02-05 22:26:17 -08:00