Tuan-Dat Tran
5bc3024eaf
feat(k3s): replace nginx loadbalancer with kube-vip for control-plane HA
...
Deploys kube-vip as a DaemonSet on all k3s server nodes, advertising a
VIP (192.168.20.2) via ARP. Eliminates the single-point-of-failure
k3s-loadbalancer VM.
- New kube_vip role: RBAC + DaemonSet templates, TLS SAN cert rotation
- playbooks/kube-vip.yaml: migration playbook (serial=1, idempotent)
- Updated k3s install tasks (server primary/secondary, agent) to use k3s_vip
instead of the loadbalancer VM IP
- Added k3s_vip: 192.168.20.2 to group_vars (below DHCP range .11-.250)
Migration steps in playbook header comment.
2026-04-26 12:08:42 +02:00
Tuan-Dat Tran
0a3171b9bc
feat(k3s): Added 2 nodes (2/2)
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2026-01-26 23:08:34 +01:00
Tuan-Dat Tran
ef652fac20
refactor: yml -> yaml
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-11-07 20:44:14 +01:00
Tuan-Dat Tran
44626101de
feat(docker): match services that moved to k3s
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-09-15 23:29:03 +02:00
Tuan-Dat Tran
48aec11d8c
feat(common): added iscsi for longhorn on k3s
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-09-07 18:17:33 +02:00
Tuan-Dat Tran
dbaebaee80
cleanup: services moved to argocd
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-27 13:58:25 +02:00
Tuan-Dat Tran
89c51aa45c
feat(argo): app-of-app argo
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-25 07:58:41 +02:00
Tuan-Dat Tran
976cad51e2
refactor(k3s): enhance cluster setup and enable ArgoCD apps
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-22 07:23:23 +02:00
Tuan-Dat Tran
e1a2248154
feat(kubernetes): add nfs-provisioner
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-15 23:24:52 +02:00
Tuan-Dat Tran
76000f8123
feat(kubernetes): add initial setup for ArgoCD, Cert-Manager, MetalLB, and Traefik
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-13 14:25:53 +02:00
Tuan-Dat Tran
9cce71f73b
refactor(k3s): manage token securely and install guest agent
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-13 02:15:01 +02:00
Tuan-Dat Tran
97a5d6c41d
refactor(k3s): centralize k3s primary server IP and integrate Netcup DNS
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-13 01:30:05 +02:00
Tuan-Dat Tran
f1b0cfad2c
refactor(k3s): streamline inventory and primary server IP handling
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-13 00:40:48 +02:00
Tuan-Dat Tran
609e000089
refactor(ansible): centralize inventory and variables in 'vars' directory
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-12 21:38:53 +02:00
Tuan-Dat Tran
3d7f652ff3
refactor(ansible): restructure inventory and remove postgres role
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-07-12 20:35:26 +02:00
Tuan-Dat Tran
e3c67a32e9
feat(reverse_proxy): add Netcup DNS ACME challenge support and refactor Caddy setup
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-28 23:24:29 +02:00
Tuan-Dat Tran
7fcee3912f
refactor(ansible): refactor common role application and improve vm ssh config
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-27 17:46:41 +02:00
Tuan-Dat Tran
f2ea03bc01
feat(proxmox): automatic vm creation
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-26 21:58:58 +02:00
Tuan-Dat Tran
27621aac03
Added proxmox-vm and static tagging of docker images
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-04-06 18:04:33 +02:00
Tuan-Dat Tran
56f058c254
moved ssh to cert based
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-03-25 01:09:08 +01:00
Tuan-Dat Tran
f2d489f63a
refactor(structure/ansible.cfg): Changed folder structure with ansible.cfg
...
Signed-off-by: Tuan-Dat Tran <tuan-dat.tran@tudattr.dev >
2025-02-07 00:06:37 +01:00