Antonio Gurgel
bc64f70610
Remove everything specific to my cluster
2023-11-26 23:41:14 -08:00
Antonio Gurgel
ffc18857a5
Export lib.rake
2023-11-26 22:38:11 -08:00
Antonio Gurgel
c4bb826b2a
Rename project to turboprop
...
Getting away from manually pressing Helm charts (while, importantly, retaining
integrity checking and determinism) is something I liken to the
transition from sail to flight as the primary mode of intercontinental
travel. As it were, ditching the helm for a yoke.
2023-11-26 22:23:18 -08:00
Antonio Gurgel
b318f9fe5d
Upgrade gateway-api to 1.0.0
2023-11-26 22:17:11 -08:00
Antonio Gurgel
be06cac343
Add Kubernetes dashboard
2023-11-26 16:41:55 -08:00
Antonio Gurgel
737eca5b62
Add cluster bootstrap script
2023-11-26 16:15:46 -08:00
Antonio Gurgel
021d366351
Forcibly set namespace on all Helm charts
2023-11-26 13:39:16 -08:00
Antonio Gurgel
1bfa6e2f2d
Fix typos in intel-gpu-exporter
2023-11-26 12:31:37 -08:00
Antonio Gurgel
64a723834b
Set fsGroup on SOTA bot
...
Its image has the UID 1900 baked into it, and without the fsGroup
the SOTA bot fails to init the cache.
2023-11-26 12:03:48 -08:00
Antonio Gurgel
3203218d3d
Fix volume mounts for Syncthing
...
Can't have two Volumes using the same existing claim or the pod
never starts.
2023-11-26 12:00:46 -08:00
Antonio Gurgel
fdd535c1fe
Missed a spot in c641df6
2023-11-26 11:54:53 -08:00
Antonio Gurgel
d911088d56
Fix busted SMon in intel-gpu-exporter
2023-11-26 11:49:15 -08:00
Antonio Gurgel
a77fec6bca
Try newer image for intel-gpu-exporter
...
This one is crashing with
Traceback (most recent call last):
File "/app/intel-gpu-exporter.py", line 47, in <module>
REGISTRY.register(DataCollector(f"http://{host}:{port}/metrics "))
File "/usr/local/lib/python3.11/site-packages/prometheus_client/registry.py", line 40, in register
names = self._get_names(collector)
^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.11/site-packages/prometheus_client/registry.py", line 80, in _get_names
for metric in desc_fnc():
File "/app/intel-gpu-exporter.py", line 21, in collect
power_watts = data[1].get("power", {}).get("value", 0.0)
~~~~^^^
2023-11-26 11:44:58 -08:00
Antonio Gurgel
7bc0a6ea73
Fix Jellyfin's mount paths
2023-11-26 11:44:29 -08:00
Antonio Gurgel
2df36321a6
Run calibre in users group
...
To match NFS. Otherwise Calibre tries and fails to chgrp its
data directory.
2023-11-26 11:40:46 -08:00
Antonio Gurgel
dbc9ac3501
Typo
2023-11-26 11:28:10 -08:00
Antonio Gurgel
ffe0f11650
Actually set config mountPath in Jellyfin
2023-11-26 01:25:33 -08:00
Antonio Gurgel
95720df236
Missed a spot in s/releases/services/
2023-11-26 01:23:19 -08:00
Antonio Gurgel
8dd5735b73
Fix mkExistingClaim
...
Turns out subPath isn't a top-level attribute, as it used to be.
2023-11-26 01:19:00 -08:00
Antonio Gurgel
ff01a6dcf7
Rant about namespace pitfalls
...
Several charts have tripped me up by lacking a namespace and therefore
dumping their resources into my default one.
2023-11-26 00:51:49 -08:00
Antonio Gurgel
9594cf686b
Deal with colons in image _tags_
...
intel-gpu-exporter tripped me up because it's pinned to a SHA256.
(As well it should be. I should survey the rest for this possibility.)
2023-11-26 00:42:05 -08:00
Antonio Gurgel
d6a763a614
Just call registry-private
registry
...
Not worth the headache to split more configuration in
lib.eureka.appTemplate.
2023-11-26 00:19:33 -08:00
Antonio Gurgel
205a2e4f54
Got these releases backwards somehow
2023-11-26 00:14:42 -08:00
Antonio Gurgel
39f07b8264
Very few kube-system services should be in services/
2023-11-26 00:07:39 -08:00
Antonio Gurgel
d798826df3
Move local-path-provisioner to system/kube-system
2023-11-26 00:06:02 -08:00
Antonio Gurgel
c641df6b50
Try again with k8s-intermediate CA
...
"Not a CA", cert-manager said. I minted it the wrong with easyrsa: I
asked for a server cert when I needed a CA.
2023-11-25 23:44:26 -08:00
Antonio Gurgel
a4d7d25e84
Add forgotten NS to secret/k8s-intermediate
2023-11-25 23:23:34 -08:00
Antonio Gurgel
f2d4a72678
Combine metallb releases
...
Same reason as an earlier commit: separating a yamlStream release
is pointless because it doesn't depend on `helm template -a`.
2023-11-25 23:17:14 -08:00
Antonio Gurgel
4f09138256
s/prometheus/prom
...
No reason to change the NFS path on losangeles.
2023-11-25 23:08:35 -08:00
Antonio Gurgel
f3c6484753
Fix typo in CNPG chart name
2023-11-25 23:00:32 -08:00
Antonio Gurgel
00b3e90344
Revert "Move internal registries to system/"
...
This reverts commit 0bf2a01bad
.
Turns out I need HTTPRoute/v1.
2023-11-25 22:57:30 -08:00
Antonio Gurgel
5fc62f2d1b
Move services/longhorn-system to extraObjects
...
It doesn't make sense to separate extraObjects; the `apiVersions`
argument doesn't affect them.
2023-11-25 22:31:48 -08:00
Antonio Gurgel
8a6a781575
Turn off Kyverno's irritating webhook clean-upper
...
If I want to uninstall it, I'll do it my own damn self.
2023-11-25 22:20:15 -08:00
Antonio Gurgel
62f155bd6b
Fix meshConfig.enableTracing (bool, not string)
2023-11-25 22:02:51 -08:00
Antonio Gurgel
0bf2a01bad
Move internal registries to system/
...
They're among the first things that must come up.
2023-11-25 21:29:48 -08:00
Antonio Gurgel
0529bdf6a2
Update my charts; yoke others to nixhelm
...
By overlaying nixhelm's charts with those I use for myself, be they
behind nixhelm's or simply absent, I get the best of both worlds.
2023-11-25 00:33:44 -08:00
Antonio Gurgel
9c18a98f0f
Use fullnameOverride on sys/argo/workflows
...
Otherwise the resources have ridiculous names like
"workflows-argo-workflows-server".
2023-11-24 20:12:10 -08:00
Antonio Gurgel
1444cb9b18
s/release/service/g
...
"Helm releases" is what I'd been terming individual services, but
it makes no sense outside of the internal context of the Helm builder.
I also didn't want to call them "apps", however shorter that term is.
These are not apps.
2023-11-24 17:35:15 -08:00
Antonio Gurgel
22055d6fd2
Update get_values post-refactor
2023-11-24 17:35:02 -08:00
Antonio Gurgel
a27d902cd3
Upgrade Kyverno to v3
2023-11-24 17:35:00 -08:00
Antonio Gurgel
f1332fc3ca
Fix bug: include dirs in Kustomizations again
...
I meant to exclude `*.yaml.drv` but ended up excluding whole dirs too.
2023-11-24 17:35:00 -08:00
Antonio Gurgel
e48d34df84
Add Kiali
2023-11-24 17:35:00 -08:00
Antonio Gurgel
dbb65668ee
Add Longhorn
2023-11-24 12:27:52 -08:00
Antonio Gurgel
5d7691e427
Add MetalLB
2023-11-24 12:11:21 -08:00
Antonio Gurgel
29cd39af8d
Clean up silly workaround in Istio revisioning
2023-11-24 12:06:06 -08:00
Antonio Gurgel
7e4d9f719c
Add CloudNativePG
2023-11-24 11:58:42 -08:00
Antonio Gurgel
54aafbb426
Add Prometheus stack (and upgrade chart)
2023-11-24 11:41:50 -08:00
Antonio Gurgel
95318e84c1
Add script to get hashes of upgraded charts
2023-11-24 10:57:28 -08:00
Antonio Gurgel
4c842b1883
Give Intel GPU exporter clearer name
2023-11-24 10:57:28 -08:00
Antonio Gurgel
15591a24f9
Add last kube-system services
2023-11-23 18:27:54 -08:00