Marian Koreniuk
49a54a60a3
Merge branch 'main' into 71-configure-github-ci
2024-07-23 13:19:17 +03:00
Andrei Kvapil
ceefae03e9
Add network policies to enforce tenant isolation ( #228 )
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-07-22 23:32:54 +02:00
Marian Koreniuk
1f283d66bf
Merge branch '69-integration-with-proxmox-paas-proxmox-bundle' into 71-configure-github-ci
2024-07-19 13:28:10 +02:00
616fa38809
Sync main to github-ci ( #226 )
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
Signed-off-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com >
Co-authored-by: Andrei Kvapil <kvapss@gmail.com >
Co-authored-by: Nikita <166552198+nbykov0@users.noreply.github.com >
Co-authored-by: Kingdon Barrett <kingdon+notify@tuesdaystudios.com >
Co-authored-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com >
2024-07-19 13:20:25 +02:00
Andrei Kvapil
7c77a6594a
Unsuspend system helmreleases on cozystack restart ( #219 )
...
Developers ofthen forget to unsuspend helm releases after the local
development (I do!)
This change make ensure that all system helm charts are getting
reconciled by flux after cozystack container restart
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-07-18 20:55:24 +03:00
bb2918d2ec
Sync 0.9 to proxmox integration ( #221 )
...
Signed-off-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com >
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
Co-authored-by: Kingdon Barrett <kingdon+notify@tuesdaystudios.com >
Co-authored-by: Andrei Kvapil <kvapss@gmail.com >
Co-authored-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com >
2024-07-17 22:51:40 +03:00
Andrei Kvapil
e265e8bc43
Ship all logos with Cozystack
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-07-16 17:31:52 +02:00
Andrei Kvapil
5bbc488e9c
Prepare release 0.9.0 ( #207 )
2024-07-10 20:25:29 +02:00
Andrei Kvapil
dfbc210bbd
hotfix: handle missing flux-operator release during upgrade ( #198 )
...
image to test:
```
ghcr.io/aenix-io/cozystack/cozystack:v0.8.0@sha256:48e9f676f4eca5f7036648a56767c31beb0aca8fdc6d6798bd65de74886ed1ef
```
this PR should fix a problem of upgrading from older cozystack version
```
make: Leaving directory '/cozystack/packages/core/platform'
deployment.apps/source-controller condition met
deployment.apps/helm-controller condition met
Error from server (NotFound): helmreleases.helm.toolkit.fluxcd.io "fluxcd" not found
NAME CREATED AT
helmreleases.helm.toolkit.fluxcd.io 2024-05-29T11:00:16Z
helmrepositories.source.toolkit.fluxcd.io 2024-05-29T11:00:17Z
make: Entering directory '/cozystack/packages/system/fluxcd-operator'
kubectl patch hr -n cozy-fluxcd fluxcd-operator -p '{"spec": {"suspend": true}}' --type=merge --field-manager=flux-client-side-apply
Error from server (NotFound): helmreleases.helm.toolkit.fluxcd.io "fluxcd-operator" not found
make: *** [../../../scripts/package-system.mk:20: suspend] Error 1
make: Leaving directory '/cozystack/packages/system/fluxcd-operator'
time="2024-07-04T12:50:05Z" level=fatal msg="failed to run" err="exit status 2"
```
2024-07-04 16:18:02 +03:00
Andrei Kvapil
15478a8807
Prepare release v0.8.0 ( #194 )
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-07-04 10:32:26 +02:00
Kingdon Barrett
2ab9a386cd
Fine-tuning Flux configuration ( #196 )
...
Fix #195
Don't set the `interval` so short on HelmReleases, with this many
HelmReleases that really hamstrings the control plane.
Also, copy the install/upgrade remediation config from system packages
to the Kubernetes templates for addon packages (cilium, flux, ingress) -
in my testing the ingress-nginx chart fails every time the first time.
Maybe that should be filed as a separate issue, I haven't looked into
detail, it is some issue related to a secret not being created, I think
it said something related to an admission controller.
Looks as though it's a conflict with being installed at the same time as
the cert-manager addon.
Signed-off-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com >
2024-07-04 02:28:57 +02:00
Andrei Kvapil
a2cc83ddc4
move fluxcd and operator back to system ( #188 )
...
Separate and move fluxcd and fluxcd-operator from `core` to `system`.
It should not be problem with self-update now, since we correctly set
dependsOn option, it ensures ordered update of flux instance right after
flux-operator.
As part of https://github.com/aenix-io/cozystack/issues/184 and
https://github.com/aenix-io/cozystack/issues/185
fixes https://github.com/aenix-io/cozystack/issues/169
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-06-26 02:49:14 +02:00
Marian Koreniuk
18579abdcd
Merge pull request #183 from aenix-io/tenant-nginx-ingress
...
Managed tenant nginx ingress controller
2024-06-25 17:32:31 +02:00
Andrei Kvapil
6bd2d45531
add tenant nginx-ingress
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-06-25 15:50:43 +02:00
Andrei Kvapil
2145f41c7f
Use patch with --no-backup-if-mismatch ( #181 )
...
Add option `--no-backup-if-mismatch` to every patch command, so it will
not create .orig and .diff files anymore
2024-06-25 14:33:07 +02:00
Kingdon Barrett
73b6f7f962
Flux Operator 0.6 ( #178 )
...
This PR upgrades to Flux-Operator 0.6 released this morning, also includes:
* #170
which is an aggregate PR, so #171 #172 etc. I think this PR now basically subsumes #170 and can replace it.
I have at least 80% confidence there are no errors in this PR. It also restores the networkPolicy default and the deleted cozy-dashboard network policy, which we will see fixed (restored to install NetworkPolicy resources by default) in the next `flux-operator` release.
Ref: https://github.com/controlplaneio-fluxcd/flux-operator/pull/52
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-06-24 13:35:26 +02:00
Andrei Kvapil
b8e5309fc4
Refactor fluxcd 2.3 update ( #172 )
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-06-24 13:14:11 +02:00
Andrei Kvapil
97bd1634a7
Merge branch 'main' into upd-flux
2024-06-24 13:13:54 +02:00
Marian Koreniuk
74e2f4a9ff
Merge branch 'main' into 69-integration-with-proxmox-paas-proxmox-bundle
2024-06-21 23:27:34 +02:00
Andrei Kvapil
f12e2c300a
add initial arm support
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-06-20 13:51:56 +02:00
Marian Koreniuk
1519f40767
Merge pull request #171 from aenix-io/flux-plugin-for-dashboard
...
Update flux plugin for dashboard
2024-06-19 16:57:46 +02:00
Andrei Kvapil
2dd2b079b2
Update flux-plugin for dashboard
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-06-17 19:00:30 +02:00
Kingdon Barrett and Andrei Kvapil
931e39fb5c
Upgrade to Flux 2.3.x ( #167 )
...
Signed-off-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com >
Co-authored-by: Andrei Kvapil <kvapss@gmail.com >
2024-06-17 16:02:32 +02:00
Kingdon Barrett
54017b6e3e
Migrate from fluxcd-community charts to Flux-Operator ( #166 )
...
Signed-off-by: Kingdon Barrett <kingdon+github@tuesdaystudios.com >
2024-06-17 15:58:13 +02:00
Marian Koreniuk
b215325600
many fixes
2024-05-30 23:59:42 +03:00
Andrei Kvapil
b30a9a6fcf
fix: dependsOn kubeovn and cilium in -hosted bundles ( #161 )
2024-05-30 23:54:39 +03:00
Andrei Kvapil
d7cfa53cd4
Prepare release v0.7.0 ( #156 )
2024-05-29 10:04:22 +02:00
Marian Koreniuk
c85e4ed050
add kubemox and fix bundle paas-proxmox
2024-05-26 01:13:41 +03:00
Marian Koreniuk
48df98230f
change hardcode for talos registry ( #148 )
...
without this fix can't build project localy
2024-05-24 12:44:56 +02:00
Marian Koreniuk and Andrei Kvapil
df168e89bb
Sync main to integration ( #146 )
...
* upd kubernetes (#134 )
* Allow root login without password
* add ephemeral volumes for containerd and kubelet
* update kubernetes application
* etcd: Add quota-backend-bytes calculations (#133 )
* Prepare release v0.6.0 (#135 )
* etcd: enable autocompact and defrag (#137 )
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
* switched place -maxdepth im Makefiles (#140 )
* postgres: fix users and roles (#138 )
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
* kubernetes: enable bpf masqurade and tunnel routing (#144 )
* Unhardcode cluster.local domain (#142 )
Allow using other domains for the cluster
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
* kamaji: unhardcode cluster.local domain (#145 )
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
* kubernetes: specify correct dns address (#147 )
---------
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
Co-authored-by: Andrei Kvapil <kvapss@gmail.com >
2024-05-23 22:07:53 +03:00
Marian Koreniuk
f157ccf4c4
fix MR conflicts
2024-05-23 21:53:43 +03:00
Marian Koreniuk
4ed51ca067
testing version 0.6.0-fix1
2024-05-23 21:17:55 +03:00
Marian Koreniuk
2f59488fea
add dev version for proxmox integration
2024-05-22 09:07:42 +03:00
Andrei Kvapil
f30f7be6cc
Unhardcode cluster.local domain ( #142 )
...
Allow using other domains for the cluster
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-05-21 11:22:54 +02:00
Marian Koreniuk and Andrei Kvapil
84c8c25fd2
Sync 0.6.0 to integration ( #136 )
...
* upd kubernetes (#134 )
* Allow root login without password
* add ephemeral volumes for containerd and kubelet
* update kubernetes application
* etcd: Add quota-backend-bytes calculations (#133 )
* Prepare release v0.6.0 (#135 )
---------
Co-authored-by: Andrei Kvapil <kvapss@gmail.com >
2024-05-18 07:10:44 +03:00
Andrei Kvapil
007d414f0e
Prepare release v0.6.0 ( #135 )
2024-05-16 16:11:37 +02:00
Marian Koreniuk
23932d49f9
Merge branch 'main' into 69-integration-with-proxmox-paas-proxmox-bundle
2024-05-13 07:42:08 +02:00
Andrei Kvapil
c0685f4318
Prepare release v0.5.0 ( #126 )
...
* Prepare release v0.5.0
* fix mariadb
2024-05-10 12:52:57 +02:00
Andrei Kvapil
4da8ac3b77
Add schema generation and remove default values ( #110 )
...
* Add schema generation and remove default values
* fix monitoring schema generation
* fix default values
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-05-09 10:45:57 +02:00
Nikita
781a531f62
Installer rollout startegy tuned to allow downtime ( #123 )
2024-05-09 10:44:43 +02:00
Andrei Kvapil
9c5318641d
Fix assets building ( #121 )
2024-05-08 20:44:32 +02:00
Andrei Kvapil
53f2365e79
Fix: kubernetes and etcd-operator issues ( #119 )
...
* Fix datastore creation depends on created secrets
* Add basic topologySpreadConstraints
* Fix kubernetes chart post-rendering
* Update release images
2024-05-06 13:59:43 +02:00
Andrei Kvapil
fca349c641
Update Talos v1.7.1
2024-05-04 07:32:08 +02:00
Andrei Kvapil
0b38599394
Prepare release v0.4.0
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-05-03 23:12:35 +02:00
Andrei Kvapil
0a33950a40
Prepare release v0.4.0 ( #115 )
2024-05-03 23:02:41 +02:00
Marian Koreniuk and Andrei Kvapil
61a5d18a57
Sync etcd-operator changes to proxmox integration ( #114 )
...
* Add etcd-operator
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
* Fix etcd-operator Makefile
---------
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
Co-authored-by: Andrei Kvapil <kvapss@gmail.com >
2024-05-03 01:03:42 +03:00
Marian Koreniuk
9df8bf27c1
Merge pull request #112 from aenix-io/proxmox-csi
...
Proxmox csi
2024-04-30 13:52:12 +02:00
Andrei Kvapil
a6d0f7cfd4
Add etcd-operator
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-04-24 12:29:05 +02:00
Andrei Kvapil
20fcd25d64
Calculate tags and version automatically ( #100 )
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-04-24 11:31:22 +02:00
Andrei Kvapil
ca79f725a3
Prepare release v0.3.1 ( #97 )
...
Signed-off-by: Andrei Kvapil <kvapss@gmail.com >
2024-04-23 12:55:45 +03:00
Marian Koreniuk