26 Commits

Author	SHA1	Message	Date
MichaelFisher1997	d8bc0b7512	feat: add CSI smoke test and default Traefik LB location	2026-03-01 19:52:14 +00:00
MichaelFisher1997	b9011bd4fd	fix: restart CSI controller and capture previous crash logs	2026-03-01 19:26:17 +00:00
MichaelFisher1997	4cefd7df40	fix: surface CSI rollout diagnostics before failing	2026-03-01 18:42:03 +00:00
MichaelFisher1997	6593adbea6	fix: make CSI rollout checks configurable and faster	2026-03-01 18:28:17 +00:00
MichaelFisher1997	712f4e8f82	fix: bound CSI rollout wait time and add failure diagnostics	2026-03-01 18:06:19 +00:00
MichaelFisher1997	bc1d685da3	fix: create CSI credentials in expected hcloud secret	2026-03-01 17:28:59 +00:00
MichaelFisher1997	2bc9749b81	feat: switch kubeconfig to tailnet endpoint and deploy Hetzner CSI	2026-03-01 17:12:12 +00:00
MichaelFisher1997	86c38e385f	fix: remove CI tailscale dependency and allow runner CIDR exception	2026-03-01 14:08:08 +00:00
MichaelFisher1997	011c220f59	fix: avoid server replacement; install tailscale via Ansible	2026-03-01 04:51:19 +00:00
MichaelFisher1997	1eebfe77df	feat: integrate tailscale access and lock SSH/API to tailnet	2026-03-01 04:04:56 +00:00
MichaelFisher1997	f95dfbf9ac	fix: deploy Hetzner CCM resources in kube-system namespace	2026-03-01 03:44:36 +00:00
MichaelFisher1997	d6168083c2	fix: support CCM deployment or daemonset rollout checks	2026-03-01 03:37:08 +00:00
MichaelFisher1997	be69044921	fix: deploy CCM via kubectl to avoid remote python kubernetes dependency	2026-03-01 03:13:33 +00:00
MichaelFisher1997	b5b8f89dc2	fix: derive k3s node IPs from terraform private addresses	2026-03-01 03:08:56 +00:00
MichaelFisher1997	f0dd31c552	fix: only manage kubeconfig on primary control plane	2026-03-01 03:02:37 +00:00
MichaelFisher1997	b703cb269b	fix: bootstrap k3s HA on private network with dual SANs	2026-03-01 02:45:00 +00:00
MichaelFisher1997	64dfbf7315	fix: use primary public IP for k3s join to match existing API cert SAN	2026-03-01 02:25:13 +00:00
MichaelFisher1997	a5ea696e0f	chore: capture k3s secondary install diagnostics on failure	2026-03-01 02:05:07 +00:00
MichaelFisher1997	2ae16414a0	fix: remove strict 9345 precheck for secondary join	2026-03-01 01:42:28 +00:00
MichaelFisher1997	063d6dfcc0	fix: auto-reset broken secondary k3s servers and precheck join ports	2026-03-01 01:25:20 +00:00
MichaelFisher1997	f699936172	fix: increase k3s readiness timeout and emit diagnostics on failure	2026-03-01 00:59:17 +00:00
MichaelFisher1997	27b29322cd	fix: use private network IPs for k3s join and node addressing	2026-03-01 00:42:55 +00:00
MichaelFisher1997	1db435cd42	fix: Use private IP for k3s HA cluster join and advertise	2026-03-01 00:32:03 +00:00
MichaelFisher1997	691b3ed316	fix: Check for k3s service instead of binary for proper HA join detection	2026-02-28 23:16:39 +00:00
MichaelFisher1997	e26fdfe614	fix: Move SSH private key setting from ansible.cfg to inventory	2026-02-28 22:53:37 +00:00
MichaelFisher1997	3b3084b997	feat: Add HA Kubernetes cluster with Terraform + Ansible ... - 3x CX23 control plane nodes (HA) - 4x CX33 worker nodes - k3s with embedded etcd - Hetzner CCM for load balancers - Gitea CI/CD workflows - Backblaze B2 for Terraform state	2026-02-28 20:24:55 +00:00