prole/infrastructure/roles
chrisfu cad49cc0a6 Summary of recent repairs and infrastructure updates
Repairs and improvements:
- iSCSI: Added cleanup tasks to remove stale mounts and fstab entries. Improved robustness of iSCSI target management and added 'iscsi_absent_mounts' support.
- K3s:
    - Updated service start logic to accept 'activating' state, preventing premature failure during slow startups.
    - Improved service stop logic to safely handle missing or not-found services.
    - Ensured 'prole-installer' ServiceAccount and ClusterRoleBinding exist for K8s administration.
    - Added leader election and etcd tuning arguments (forgiving leases) to config.yaml.j2.
    - Removed deprecated 'prole-port-forwards' systemd service.
- Installer & Scripts:
    - Updated legacy_tk.py to support K3s mode, secret resolution for passwords, and better environment management (including ~/.prole/env.sh for service mode).
    - Updated init_ansible.sh to support PROLE_VAULT_PASS_FILE and ANSIBLE_VAULT_PASSWORD_FILE.
    - Improved directory and kubeconfig path resolution in prole_cfg.sh to support fallback to ~/.prole.
    - Enhanced Grafana password resolution in init_monitoring.sh.
    - Added automatic application of iSCSI StorageClass and PersistentVolumes in init_openbao.sh.
- General: Switched conf/prole.cfg to k3s deployment mode and updated vault_k3s.yml token.

New Ansible Tasks and Playbooks:
- infrastructure/playbooks/iscsi_cleanup.yml: Automates logout and removal of stale iSCSI node records.
- infrastructure/playbooks/prole_logs_migrate.yml: Orchestrates /prole/logs migration to iSCSI storage.
- infrastructure/playbooks/tmp_bao_dir.yml: Ensures host-level storage directories for OpenBao.
- infrastructure/playbooks/tmp_mount.yml: Utility to verify and enforce host-level mounts.
- infrastructure/playbooks/k3s_sync.yml: Added tasks to start K3s after sync and update local kubeconfig on the controller.
- Added 'Unmount stale iSCSI mounts' and 'Remove stale iSCSI fstab entries' to the iscsi role.
- Added 'Ensure prole-installer service account exists' to the k3s role.
2026-02-15 17:51:57 -08:00
..
cgroups feat(infrastructure): enhance k3s automation and OpenTofu integration 2026-02-07 22:53:18 -08:00
iscsi/tasks Summary of recent repairs and infrastructure updates 2026-02-15 17:51:57 -08:00
k3s Summary of recent repairs and infrastructure updates 2026-02-15 17:51:57 -08:00
local_user/tasks ansibles roles k3s, local_user 2026-01-28 13:05:28 -08:00
noswap Refactor rsyslog template path and introduce noswap role: 2026-01-24 01:32:01 -08:00
pihole_db_rotate ansible managed piholes 2026-01-18 22:01:23 -08:00
pihole_dns pihole ansible management fixes 2026-01-19 01:41:45 -08:00
prole/tasks Summary of recent repairs and infrastructure updates 2026-02-15 17:51:57 -08:00
rsyslog Refactor installation and initialization logic, and expand test coverage 2026-02-13 21:36:39 -08:00
samba_ad_dc add samba_ad_dc role 2026-01-28 12:41:06 -08:00
samba_dns/tasks add ansible role samba_dns. master group_vars/all/dns.yml\nfixed role iscsi 2026-01-29 16:58:30 -08:00
samba_reverse_dns/tasks checkpoint: installer refinements, k3s drift protection, and infra updates 2026-02-12 02:30:44 -08:00