Marco Nenciarini
e4b8327fde
Remove setting from servers
2022-02-22 16:04:27 +01:00
Marco Nenciarini
0c3aa36c03
First control plane node is not special anymore
...
The first control plane node is now identical to any other server
node. The cluster initialization happens once in two steps: first,
make sure that the k3s cluster is initialized and then apply our
configurations while the other nodes join. This change makes the
initialization more resilient and even faster than before.
2022-02-22 13:36:25 +01:00
Karim Naufal
11dc61a39e
tweaked k3s start
2022-02-20 13:36:41 +01:00
Marco Nenciarini
0f9d277293
Merge branch 'master' into modules
2022-02-20 11:30:07 +01:00
Karim Naufal
e39dc064e2
making k3s start more robust
2022-02-20 02:04:37 +01:00
Marco Nenciarini
0090c1a6f1
Fist attempt to factor microOS install
2022-02-20 00:00:13 +01:00
phaer
406ba988bf
use jsonencode, not template for config.ign
2022-02-19 15:07:39 +01:00
Karim Naufal
1aae4b3b09
adjust ssh check loop time from sleep 2 to 3, to reduce the number of outputs
2022-02-18 01:13:28 +01:00
Karim Naufal
cb5aa2410d
adjust ssh check loop time from sleep 3 to 5, to reduce the number of outputs
2022-02-17 21:49:03 +01:00
Karim Naufal
1f0a03b335
moved k3s-selinux install to combustion
2022-02-17 13:19:21 +01:00
Karim Naufal
9fa2fc9edc
fix ip_not_available error
2022-02-16 11:06:47 +01:00
Karim Naufal
1165389fc3
fix ip_not_available error
2022-02-16 10:56:22 +01:00
Karim Naufal
4aabee0dad
fix the upgrade node label
2022-02-16 09:23:28 +01:00
Karim Naufal
d920132694
k3s install method ok
2022-02-16 04:24:20 +01:00
Karim Naufal
fec695086a
k3s-install ready for testing
2022-02-16 03:18:40 +01:00
Karim Naufal
7ac37f0ddf
k3s-install init
2022-02-15 23:54:55 +01:00
phaer
c46e912d3e
use resource-level connection blocks...
...
this is now possible, since all our provisioners are using
the same settings. And it saves a bunch of lines
2022-02-11 16:00:19 +01:00
Karim Naufal
7a846f3a61
pre master
2022-02-10 03:31:20 +01:00
Karim Naufal
cd6b5e2768
pre master
2022-02-10 03:01:40 +01:00
Marco Nenciarini
0b13f900e1
Agents IP should not depend on servers_num
2022-02-09 13:03:31 +01:00
phaer
af78d8fc86
terraform fmt
2022-02-08 09:12:16 +01:00
phaer
d6fe4152c9
re-add node-taints after rebase
2022-02-08 09:05:36 +01:00
phaer
960311ebd4
use yamlencode for k3s configs...
...
...and remove the now, hopefully unneeded workaround for
agent.conf, all values are in config.yaml now
2022-02-08 09:00:12 +01:00
Marco Nenciarini
d939600561
Avoid connection timeout errors while waiting for reboot
2022-02-07 22:58:34 +01:00
Karim Naufal
95c6b8be93
removed the ssh connection timeout messages while waiting, and also reduced the connection refused messages
2022-02-07 22:07:05 +01:00
Marco Nenciarini
7e6eb731dd
Add setting to allow_scheduling_on_control_plane
2022-02-07 16:11:41 +01:00
phaer
1a50ace0d3
remove root from ssh_args...
...
because scp does not take the username via -l, so we just re-add
it to the commands themselves.
2022-02-07 13:19:06 +01:00
phaer
a5914f81e6
fix ssh identity...
...
Newly added ssh commands were missing the flag -i to pass an
identity file. This means that those commands use different
settings then the provisioners and their connection blocks
around them.
While adding this parameter, I decided it would be cleanest
to add local.ssh_args.
2022-02-07 13:08:47 +01:00
Marco Nenciarini
cf68368eea
Reduce reboot time
2022-02-07 09:55:02 +01:00
Karim Naufal
fba212de47
added kured and fixed initial ignition disk partitioning
2022-02-07 08:46:10 +01:00
Karim Naufal
7532e7a4d5
initial k3s on MicroOS on Hetzner ok
2022-02-06 08:40:51 +01:00
Karim Naufal
623954e5ef
microOS eth1 still down
2022-02-05 01:22:35 +01:00
Karim Naufal
3f0f0ca705
microOS prep
2022-02-05 00:02:25 +01:00
Waël Ammar
8aa3cf780f
Add Hetzner placement group and link servers to it
2022-01-29 21:15:23 +01:00
phaer
07ab83a09f
use locals to deduplicate ssh key expressions
2022-01-25 14:29:10 +01:00
phaer
9bb945a302
run terraform fmt
2022-01-25 14:28:48 +01:00
Karim Naufal
1ed7932dc9
Revert "make private key optional to support hardware tokens for SSH"
2022-01-25 13:17:40 +01:00
phaer
1236bbe6f3
make private key optional
...
Setting private_key to null uses the local ssh-agent as a fallback for
authentication. Using the public_key instead of the private_key for
ssh -i lets the agent select the right identity if loaded. tested
with a yubikey
2022-01-23 14:14:53 +01:00
Karim Naufal
0415a43e9e
attempt to fix waitForAction
2022-01-12 15:26:52 +01:00
Karim Naufal
8113016f86
k3os ok
2021-12-03 02:11:52 +01:00
Karim Naufal
61f8093951
k3os master ok
2021-11-30 23:09:34 +01:00
Karim Naufal
ca2bf4dc82
Added Hetzner firewall and fixed addresses
2021-09-01 00:37:11 +02:00
Karim Naufal
f615c994af
initial commit
2021-07-30 10:12:37 +02:00
