chrisfu
f47c18fef7
feat(infrastructure): enhance k3s automation and OpenTofu integration
...
- Infrastructure:
- Updated k3s Ansible role with mountpoint preflight checks and better permission management.
- Automated deployment of prole configuration and port-forwarding scripts to cluster hosts.
- Added systemd service for managing port forwards on k3s nodes.
- Added prole-installer service account token automation.
- K8s Manifests:
- Renamed and added Persistent Volumes in iscsi-pvs.yaml (including OpenBao support).
- Updated StatefulSets for garage and openbao.
- Migrated prole-db to CloudNativePG-based configuration.
- Added comprehensive OpenTofu manifests for cluster deployment.
- Configuration:
- Added cluster-specific configurations (k3d, k3s-hosts).
- Added PostgreSQL configuration templates.
- Updated .gitignore to track the conf/ directory.
- Tools:
- Updated install.py and port-forwarding scripts.
- Added render_manifest.py for manifest generation.
2026-02-07 22:53:18 -08:00
chrisfu
d7c4778b51
Add preflight checks for cgroup kernel params in k3s setup
...
- Ensure cgroup kernel parameters are present before k3s installation.
- Introduce playbook changes to integrate cgroup prerequisites role.
2026-01-28 14:38:36 -08:00
chrisfu
2e4d785de3
Refactor k3s version installation logic to use a ternary filter for cleaner syntax in main.yml.
2026-01-28 13:43:46 -08:00
chrisfu
37156086aa
ansible stable
2026-01-26 18:56:17 -08:00
chrisfu
035d63090c
Fix Ansible YAML parsing errors and standardize host_vars. Removed invalid '---' document separators from host_vars files, merged redundant myrddin config, and renamed host_vars to use .yml extension. Verified with successful ansible-playbook --syntax-check.
2026-01-25 23:36:25 -08:00
chrisfu
5cb2dbdc57
fix k3s role
2026-01-25 06:00:38 -08:00
chrisfu
7c25d731ce
/var/log/pihole SAN mounted
2026-01-25 05:33:40 -08:00
chrisfu
b250d17a93
added iscsi role, ensure /var/lib/rancher storage is mounted before k3s
2026-01-25 01:26:07 -08:00
chrisfu
829d8d14fd
k3s should not initialize and start yet, install, ensure stopped. k3s storage next before init
2026-01-24 00:35:11 -08:00
chrisfu
59cc9f7edf
Update K3s and Samba DNS configurations
...
- Change K3s service to be stopped and disabled by default.
- Adjust PTR records in the inventory to ensure correct FQDN mappings.
- Refactor Samba DNS task to use include_tasks for PTR records.
2026-01-23 20:33:17 -08:00
chrisfu
dfed907938
Fix k3s_node_ip detection on hosts without wired IP: Added fallback to default IPv4 address if none of the specified wired interfaces have an IP address.
2026-01-21 20:39:10 -08:00
chrisfu
e69b5f2008
ansible: replace no_swap role with swap role and enhance K3s setup
...
- Removed the `no_swap` role and replaced it with the new `swap` role for managing swap configurations.
- Updated the K3s role to dynamically detect the first available wired interface IP and validate it.
- Enhanced K3s installation by adding support for disabling SELinux RPM.
- Adjusted inventory and `site.yml` to align with the updated roles.
- Added `.vault_pass` to `.gitignore`.
- Updated Ansible configuration with result format compatibility for different versions.
2026-01-21 16:16:14 -08:00
chrisfu
f4d96211d8
ansible: add K3s role files
2026-01-21 10:27:27 -08:00
