17 Commits

Author	SHA1	Message	Date
MichaelFisher1997	31b82c9371	Deploy CCM via Ansible before workers join to fix external cloud provider ... This fixes the chicken-and-egg problem where workers with --kubelet-arg=cloud-provider=external couldn't join because CCM wasn't running yet to remove the node.cloudprovider.kubernetes.io/uninitialized taint. Changes: - Create ansible/roles/ccm-deploy/ to deploy CCM via Helm during Ansible phase - Reorder site.yml: CCM deploys after secrets but before workers join - CCM runs on control_plane[0] with proper tolerations for control plane nodes - Add 10s pause after CCM ready to ensure it can process new nodes - Workers can now successfully join with external cloud provider enabled Flux still manages CCM for updates, but initial install happens in Ansible.	2026-03-22 23:58:03 +00:00
MichaelFisher1997	08a3031276	refactor: retire imperative addon roles	2026-03-17 01:04:02 +00:00
MichaelFisher1997	bed8e4afc8	feat: migrate core addons toward flux	2026-03-11 17:43:35 +00:00
MichaelFisher1997	6f2e056b98	feat: sync runtime secrets from doppler	2026-03-09 00:25:41 +00:00
MichaelFisher1997	f95e0051a5	feat: automate private tailnet access on cp1	2026-03-08 04:16:06 +00:00
MichaelFisher1997	86fb5d5b90	fix: move observability gitops gating to role level	2026-03-05 00:17:25 +00:00
MichaelFisher1997	8b403cd1d6	feat: migrate observability stack to flux gitops	2026-03-04 23:38:40 +00:00
MichaelFisher1997	2f166ed9e7	feat: manage grafana content as code with fast dashboard workflow	2026-03-04 03:36:01 +00:00
MichaelFisher1997	a0ed6523ec	feat: add Tailscale Kubernetes Operator for Grafana/Prometheus access	2026-03-02 20:28:51 +00:00
MichaelFisher1997	b30977a158	feat: deploy lightweight observability stack via Ansible	2026-03-02 01:33:41 +00:00
MichaelFisher1997	2bc9749b81	feat: switch kubeconfig to tailnet endpoint and deploy Hetzner CSI	2026-03-01 17:12:12 +00:00
MichaelFisher1997	b5b8f89dc2	fix: derive k3s node IPs from terraform private addresses	2026-03-01 03:08:56 +00:00
MichaelFisher1997	b703cb269b	fix: bootstrap k3s HA on private network with dual SANs	2026-03-01 02:45:00 +00:00
MichaelFisher1997	64dfbf7315	fix: use primary public IP for k3s join to match existing API cert SAN	2026-03-01 02:25:13 +00:00
MichaelFisher1997	27b29322cd	fix: use private network IPs for k3s join and node addressing	2026-03-01 00:42:55 +00:00
MichaelFisher1997	1db435cd42	fix: Use private IP for k3s HA cluster join and advertise	2026-03-01 00:32:03 +00:00
MichaelFisher1997	3b3084b997	feat: Add HA Kubernetes cluster with Terraform + Ansible ... - 3x CX23 control plane nodes (HA) - 4x CX33 worker nodes - k3s with embedded etcd - Hetzner CCM for load balancers - Gitea CI/CD workflows - Backblaze B2 for Terraform state	2026-02-28 20:24:55 +00:00