infra
/
kubernetes
1
0
Fork 0
Code Pull Requests 4 Activity
Resources for deploying and managing my personal Kubernetes cluster
615 Commits
9 Branches
0 Tags
3.5 MiB
Shell 83.2%
JavaScript 14.8%
Awk 2%
 
 
 
Go to file
Dustin 36015084c8 ansible: Allow host-provisioner to read root CA 
The Kubernetes root CA certificate is stored in a ConfigMap named
`kube-root-ca.crt` in every namespace.  The _host-provisioner_ needs to
be able to read this ConfigMap in order to prepare control plane nodes,
as it is used by HAProxy to check the health of the API servers running
on each node.
 		2025-07-23 10:50:24 -05:00
20125 20125: Mark MinIO backups alerts as system-wide 2025-07-06 12:27:07 -05:00
ansible ansible: Allow host-provisioner to read root CA 2025-07-23 10:50:24 -05:00
argocd argocd: Set imagePullPolicy: IfNotPresent 2025-07-21 15:07:01 -05:00
authelia authelia: Add address, phone scopes for Jenkins 2025-07-22 15:26:29 -05:00
autoscaler autoscaler: Set imagePullPolicy: IfNotPresent 2025-07-21 17:17:16 -05:00
cert-manager cert-manager: Add role for Jenkins to access certs 2025-07-21 12:24:00 -05:00
collectd collectd: Add DaemonSet for collectd 2024-06-26 18:29:49 -05:00
dch-root-ca dch-root-ca: Disable hash name suffix 2025-02-08 16:59:17 -06:00
dch-webhooks ansible: Add service account for host-provisioner 2025-06-30 16:16:28 -05:00
device-plugins device-plugins: Allow FUSE plugin on Jenkins nodes 2024-02-13 07:56:35 -06:00
docker-distribution docker-distribution: Deploy OCI image registry 2022-07-31 01:15:01 -05:00
dynk8s-provisioner dynk8s: Move Wireguard config to SealedSecret 2024-11-21 19:41:55 -06:00
firefly-iii firefly-iii: Set imagePullPolicy: IfNotPresent 2025-07-21 15:07:01 -05:00
fleetlock fleetlock: Use patched server from Github PR 2024-11-05 07:05:55 -06:00
grafana grafana: Add Victoria Logs data source 2025-06-05 07:07:55 -05:00
home-assistant mosquitto: Update to 2.0.22 2025-07-12 11:32:06 +00:00
hudctrl hudctrl: Update for v0.2.0 2022-12-18 16:26:07 -06:00
ingress ingress: Use Deployment+Service with externalIPs 2024-11-22 22:35:37 -06:00
invoice-ninja invoice-ninja: Fix network policy for ingress 2024-12-07 09:28:44 -06:00
jenkins ssh-host-keys: Do not specify a namespace 2025-07-21 11:47:39 -05:00
keepalived keepalived: Initial commit 2024-11-22 22:26:48 -06:00
keyserv keyserv: Add age keys for unifi2 2024-05-26 11:48:12 -05:00
kitchen kitchen: Round weather metrics 2025-07-21 14:40:35 -05:00
kubelet-csr-approver kubelet-csr-approver: Initial commit 2025-07-21 18:49:44 -05:00
loki-ca loki-ca: Add cert-manager issuer for Loki CA 2024-02-22 07:10:01 -06:00
metrics metrics: Add role to allow anon access to metrics 2022-11-05 16:23:02 -05:00
ntfy ntfy: Set imagePullPolicy: IfNotPresent 2025-07-21 15:07:01 -05:00
paperless-ngx tika: Update to 3.2.1.0 2025-07-12 11:32:11 +00:00
photoframesvc photoframesvc: Initial commit 2023-10-14 11:25:50 -05:00
phpipam phpipam: Migrate to Sealed Secrets 2023-10-14 10:56:20 -05:00
postgresql postgresql: Fix pod secrets 2023-10-19 07:12:16 -05:00
prometheus_speedtest prom_speedtest: Add application manifest 2022-08-06 22:21:06 -05:00
promtail promtail: Deploy as DaemonSet 2024-02-22 07:10:01 -06:00
rabbitmq rabbitmq: Configure dch-webhooks/host-provisioner 2025-02-08 16:59:26 -06:00
receipts receipts: Deploy Receipts management tool 2025-03-13 20:26:11 -05:00
rent-reminder rent-reminder: Add CronJob to send reminders 2024-01-04 08:54:54 -06:00
restic restic: pin to 0.18.0 2025-07-21 18:58:57 -05:00
restic-exporter restic-exporter: Point at chromie.p.b 2024-09-08 20:24:43 -05:00
scanservjs scanservjs: Update to v2.27.0 2023-07-08 07:06:10 -05:00
sealed-secrets sealed-secrets: Deploy Bitnami Sealed Secrets 2023-10-13 18:34:01 -05:00
setup setup: ks: Generate iSCSI initiator name 2022-08-23 21:22:01 -05:00
ssh-host-keys ssh-host-keys: Do not specify a namespace 2025-07-21 11:47:39 -05:00
sshca sshca: Do not sign certs for root 2025-03-04 19:23:49 -06:00
step-ca Merge remote-tracking branch 'refs/remotes/origin/master' 2024-08-06 08:03:42 -05:00
storage longhorn: Run on dedicated nodes 2024-11-21 22:59:14 -06:00
updatebot home-assistant: Pull Zigbee/ZWave images from ghcr 2025-07-07 08:46:04 -05:00
vaultwarden vaultwarden: Update to 1.34.1 2025-05-31 11:32:18 +00:00
victoria-metrics Merge remote-tracking branch 'refs/remotes/origin/master' 2025-07-21 12:02:44 -05:00
websites websites: Manage dcow cert via Ingress annotation 2024-08-24 11:30:56 -05:00
xactfetch xactfetch: Configure secretsocket 2024-07-11 22:49:07 -05:00
xactmon Merge branch 'xactmon-firefly-token' 2025-06-21 14:00:45 -05:00
README.md README: Add storage section 2022-07-31 01:38:46 -05:00

README.md

Dustin's Kubernetes Cluster

This repository contains resources for deploying and managing my on-premises Kubernetes cluster

Cluster Setup

The cluster primarily consists of libvirt/QEMU+KVM virtual machines. The Control Plane nodes are VMs, as are the x86_64 worker nodes. Eventually, I would like to add Raspberry Pi or Pine64 machines as aarch64 nodes.

All machines run Fedora, using only Fedora builds of the Kubernetes components (kubeadm, kubectl, and kubeadm).

See Cluster Setup for details.

Jenkins Agents

One of the main use cases for the Kubernetes cluster is to provide dynamic agents for Jenkins. Using the Kubernetes Plugin, Jenkins will automatically launch worker nodes as Kubernetes pods.

See Jenkins Kubernetes Integration for details.

Persistent Storage

Persistent storage for pods is provided by Longhorn. Longhorn runs within the cluster and provisions storage on worker nodes to make available to pods over iSCSI.

See Persistent Storage Using Longorn for details.