chrisfu
5dcd3b9581
ansible: treat /var/lib/rancher as local K3s state
...
Update inventory/roles to keep K3s state on local storage and prevent iSCSI from managing /var/lib/rancher.
Also add a single-host k3s install playbook, a systemd override template, and docs describing the installer ↔ Ansible boundary and slow-storage knobs.
Co-authored-by: Junie <junie@jetbrains.com>
2026-03-15 23:20:55 -07:00
chrisfu
436c6214df
checkpoint: k3s agent config + node labels + registry optimizations
...
- k3s: render server-only config keys only for servers; add regression test; make guardrail test non-sudo
- k3s/site: add post-provision node labeling tasks + playbook tier; extend inventory node label mapping
- registry: default namespace to common-services and skip redundant image pushes by probing registry manifests (installer + init scripts)
2026-03-07 03:14:26 -08:00
chrisfu
d2295f4c2b
ansible: add K3s datastore export/import, improve iSCSI handling, and migrate merlin to MariaDB primary
...
- Added tasks and playbooks for K3s datastore export/import using MariaDB Tools role, with associated tests and defaults.
- Enhanced iSCSI role to support mkfs-once logic and safer re-initialization of block storage.
- Migrated iSCSI-backed Rancher data from retropie to merlin.prole.org.
- Updated k3s roles/playbooks to relax Rancher storage preflight checks, supporting PARTUUID-based mounts.
- Adjusted Samba AD NetBIOS name derivation to use uppercase short hostname by default.
- Incremented prole DB version to 104, updated generated prole.cfg, inventory, and recovery manifest templates.
2026-03-06 14:25:13 -08:00
chrisfu
78a16f47e2
ansible: add merlin k3s host + USB-backed MariaDB bring-up
...
- Add merlin.prole.org (10.0.0.6) to inventory (k3s_hosts, mariadb_primary)
- Relax k3s preflight: /var/lib/rancher no longer requires iSCSI, only blocks SD-backed storage
- Add netplan static IP role (NetworkManager) and MariaDB primary/replica roles + site.yml ordering
- Add/upgrade USB prep tooling (prepare_mariadb_usb.sh + generated setup.sh + fstab-by-LABEL)
Co-authored-by: Junie <junie@jetbrains.com>
2026-03-05 19:17:40 -08:00
chrisfu
23cf4ac33d
Configure K3s for retropie and add Traefik Ingress. Updated K3s templates for node-ip/flannel-iface, configured retropie host vars, enabled Traefik, added Ingress resources for Grafana, Prole, Kong, and Supabase, and set Postgres to LoadBalancer.
2026-02-16 04:28:40 -08:00
chrisfu
f47c18fef7
feat(infrastructure): enhance k3s automation and OpenTofu integration
...
- Infrastructure:
- Updated k3s Ansible role with mountpoint preflight checks and better permission management.
- Automated deployment of prole configuration and port-forwarding scripts to cluster hosts.
- Added systemd service for managing port forwards on k3s nodes.
- Added prole-installer service account token automation.
- K8s Manifests:
- Renamed and added Persistent Volumes in iscsi-pvs.yaml (including OpenBao support).
- Updated StatefulSets for garage and openbao.
- Migrated prole-db to CloudNativePG-based configuration.
- Added comprehensive OpenTofu manifests for cluster deployment.
- Configuration:
- Added cluster-specific configurations (k3d, k3s-hosts).
- Added PostgreSQL configuration templates.
- Updated .gitignore to track the conf/ directory.
- Tools:
- Updated install.py and port-forwarding scripts.
- Added render_manifest.py for manifest generation.
2026-02-07 22:53:18 -08:00
chrisfu
453ccfd015
Add k3s kubeconfig user configuration and iSCSI target defaults
2026-01-27 21:46:56 -08:00
chrisfu
37156086aa
ansible stable
2026-01-26 18:56:17 -08:00
