mirror of
https://github.com/dredx/prole.git
synced 2026-09-27 01:34:30 +00:00
f47c18fef7
- Infrastructure:
- Updated k3s Ansible role with mountpoint preflight checks and better permission management.
- Automated deployment of prole configuration and port-forwarding scripts to cluster hosts.
- Added systemd service for managing port forwards on k3s nodes.
- Added prole-installer service account token automation.
- K8s Manifests:
- Renamed and added Persistent Volumes in iscsi-pvs.yaml (including OpenBao support).
- Updated StatefulSets for garage and openbao.
- Migrated prole-db to CloudNativePG-based configuration.
- Added comprehensive OpenTofu manifests for cluster deployment.
- Configuration:
- Added cluster-specific configurations (k3d, k3s-hosts).
- Added PostgreSQL configuration templates.
- Updated .gitignore to track the conf/ directory.
- Tools:
- Updated install.py and port-forwarding scripts.
- Added render_manifest.py for manifest generation.
31 lines
761 B
YAML
31 lines
761 B
YAML
iscsi_portal: 10.0.0.203
|
|
|
|
iscsi_targets:
|
|
# PROLE-K3S-1
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-16.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /var/lib/rancher
|
|
fstype: ext4
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=73a886bb-3f01-4e8a-9c6d-ab431c671824"
|
|
|
|
k3s_enabled: true
|
|
k3s_role: agent
|
|
k3s_server_url: "https://myrddin.prole.org:6443"
|
|
k3s_token: "{{ vault_k3s_token }}"
|
|
k3s_node_labels:
|
|
- "role=observer"
|
|
- "quorum=true"
|
|
k3s_node_taints:
|
|
- "prole.org/role=observer:NoSchedule"
|
|
k3s_write_kubeconfig_mode: "0640"
|
|
k3s_kubeconfig_group: kubeadm
|
|
k3s_kubeconfig_users:
|
|
- pi
|
|
|
|
cgroups_cmdline_candidates:
|
|
- /boot/cmdline.txt
|
|
- /boot/firmware/cmdline.txt
|