Tom Alexander
|
24f4a8c2d9
|
Tweak the containerd garbage collect threshold on kubelets.
Pods were getting evicted due to disk pressure, so this causes garbage collection to trigger sooner.
|
2026-07-18 13:59:56 -04:00 |
|
Tom Alexander
|
a3cdaa9128
|
Increase subuid/subgid range to support running buildkit inside podman.
|
2026-07-18 08:42:02 -04:00 |
|
Tom Alexander
|
51295a23dc
|
Enable the build VM as a substituter.
This should enable me to have local build jobs without rebuilding stuff that already exists on the build VM server.
|
2026-07-18 08:41:11 -04:00 |
|
Tom Alexander
|
11d8b93551
|
Add an /etc/hosts entry for google's metadata server.
gcloud was reaching out to this address which was causing delays. Pointing it to localhost to speed the failure up.
|
2026-07-14 11:53:38 -04:00 |
|
Tom Alexander
|
40b8742a80
|
Add nix pull-through cache secrets.
|
2026-07-13 20:35:11 -04:00 |
|
Tom Alexander
|
32080e0e01
|
Add chown for nix pull through cache database.
|
2026-07-12 17:25:12 -04:00 |
|
Tom Alexander
|
41668506cd
|
Retire the kubernetes branch now that it is merged into nix.
|
2026-07-06 18:28:58 -04:00 |
|
Tom Alexander
|
63a988d1da
|
Merge branch 'kubernetes' into nix
|
2026-07-06 18:23:07 -04:00 |
|
Tom Alexander
|
7c8d278923
|
Configure kernel preemption.
|
2026-07-06 18:12:15 -04:00 |
|
Tom Alexander
|
297577471e
|
Update kubernetes packages and update to gateway API 1.5.1.
|
2026-07-06 18:12:15 -04:00 |
|
Tom Alexander
|
345ecfc7cf
|
Add secret for homepage-staging.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
889de9dbf6
|
Add a secret for the harbor webhooks to flux.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
65c2021473
|
Update flux and install the image automation controller.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
b0f025d340
|
Add IP addresses to worker certs for the metrics server.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
a00115fb4e
|
Delete images after 24 hours of being unused.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
058f0cd59b
|
Set up containerd use harbor.fizz.buzz.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
c8c18bde88
|
Add secrets for archive-box, webhook-bridge, and tekton.
|
2026-07-06 18:12:14 -04:00 |
|
Tom Alexander
|
a36016e631
|
Allow node-to-node communication.
|
2026-07-06 18:12:13 -04:00 |
|
Tom Alexander
|
deaea6954e
|
Use numbers for folder order.
|
2026-07-06 18:12:13 -04:00 |
|
Tom Alexander
|
c1ec96044e
|
Add harbor secrets.
|
2026-07-06 18:12:13 -04:00 |
|
Tom Alexander
|
cdb2994447
|
Switch to the experimental gateway CRDs for TCPRoute support.
|
2026-07-06 18:12:13 -04:00 |
|
Tom Alexander
|
7416e412df
|
Add oauth2 proxy secrets.
|
2026-07-06 18:12:13 -04:00 |
|
Tom Alexander
|
d14d8fe4a4
|
Add dex secrets.
|
2026-07-06 18:12:13 -04:00 |
|
Tom Alexander
|
a4b20c1ead
|
Enable the firewall.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
b593fdc8a7
|
Add gitea secrets.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
8f5f59ee87
|
Add generation for in-repo secrets.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
fc32a42750
|
Enforce cilium network policies.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
1d3d178fc8
|
Downgrade to gateway 1.4.1.
1.5 came out recently, so no gateway providers support it.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
e54f272a69
|
Update packages in kubernetes/keys.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
e09e659d91
|
Fix network for updated nix.
|
2026-07-06 18:12:12 -04:00 |
|
Tom Alexander
|
3cc0fb1d3f
|
Fix proxy auth tls
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
92727aa1f7
|
Generate certificates for the aggregation layer.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
2a319deea0
|
Add a note for the cilium connectivity test.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
d6f089bdb4
|
Temporarily disable the firewall for debugging.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
cce4f98125
|
Enable gateway support.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
612158c3e1
|
Enable hubble.
|
2026-07-06 18:12:11 -04:00 |
|
Tom Alexander
|
1ed3832730
|
Temporarily drop flux interval to 1 minute during early development.
This is to reduce waiting time.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
f3b969642c
|
Install deferred manifests.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
23d9bbb8a1
|
Add a custom nftables firewall config.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
9e729a8cc6
|
Enable the firewall.
Now that we have networking working, I can enable the firewall and confirm nothing breaks.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
3169822726
|
Fix CoreDNS IPv4 connectivity.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
9b5fbadc44
|
Increase timeout for coredns cache.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
ab1b2a70f3
|
More changes to try to fix coredns.
|
2026-07-06 18:12:10 -04:00 |
|
Tom Alexander
|
4061d14651
|
Move the kubelet yaml config into nix.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
361ec69a8b
|
Implement a generic helm templater package.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
f545376aec
|
Switch to generating the coredns manifests via nix.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
dc80c06ee9
|
Use CoreDNS for in-cluster DNS requests and caching.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
5d58d550d3
|
Enable native routing.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
51e027ba67
|
Build the cilium manifest automatically in nix.
|
2026-07-06 18:12:09 -04:00 |
|
Tom Alexander
|
37efcdb367
|
Allow pods to directly speak to the public internet on their own public IPv6 addresses.
|
2026-07-06 18:12:08 -04:00 |
|