Commit Graph

154 Commits

Author SHA1 Message Date
jv 5766ff9bac fix: resolve jeannie CI failures, add gitleaks ignore, apply ruff fixes, make scripts executable
Homelab Main / validate (push) Failing after 17s Details
Homelab Main / deploy (push) Has been skipped Details
2026-09-20 00:29:43 -05:00
jv b9beb7f8ad chore: add tflint to playbook and gitleaks ignore cache
Homelab Main / validate (push) Failing after 13s Details
Homelab Main / deploy (push) Has been skipped Details
2026-09-19 20:19:52 -05:00
jv 6dfae38adf Platform: re-keyscan Argo CD GitOps SSH host on every apply
The argocd_private_repo provisioner only ran when its static triggers
(namespace, repo_url, ssh_key_path) changed. When the Gitea SSH host key
rotated (container rebuild / Debian rekey), the trigger set stayed
identical so tofu apply never re-ran the ssh-keyscan, silently leaving
Argo CD with 'knownhosts: key is unknown' and all Applications in
ComparisonError.

Add a timestamp()-based scan_revision trigger so the keyscan +
configmap/secret merge runs on EVERY apply, self-healing the host key
in argocd-ssh-known-hosts-cm. The provisioner is idempotent (reads the
existing configmap, merges the fresh scan, sorts, reapplies), so
re-running is safe.
2026-09-16 11:54:25 -05:00
jv dce4fa6022 Edge matrix vhost, node-exporter scrape, arr/rpi refinements
- bootstrap/edge: add matrix-vhost template + matrix.conf mount
  (isolated cert path), config_hash includes matrix.conf so tofu
  regenerates edge config when it changes; add node-exporter sidecar
- bootstrap/platform: prometheus additionalScrapeConfigs for rpi-node
  and oci-edge-node targets, plus node-exporter edge port 9100
- apps/homelab-alerts: host filesystem >85% alert
- infra/arr-stack + rpi-services: compose refinements
- .gitignore: ignore tofu tfstate backups (*.tfstate.*.backup)
2026-09-16 11:37:35 -05:00
juvenal.diaz d6e33250f4 Gates for pimoc workers with less than 2 cpus 2026-07-23 13:16:11 -06:00
juvenal.diaz fb605ffa8b Increase argocd limits 2026-07-23 11:32:23 -06:00
juvenal.diaz 005a3c4b84 Make helm do not block 2026-07-22 23:10:11 -06:00
juvenal.diaz 318ba53eb0 Fixes stale helm 2026-07-22 22:22:54 -06:00
juvenal.diaz 0d05159054 Fix apt interpolation 2026-07-22 22:11:57 -06:00
juvenal.diaz 9df2dd0fd4 Making apt cms ricker in pimox workers 2026-07-22 22:07:17 -06:00
juvenal.diaz a47f4b56e9 Using dedicated known host file for ephemeral pimox workers 2026-07-22 21:43:36 -06:00
juvenal.diaz 1f94eebca2 Fixing terraform error 2026-07-22 21:32:24 -06:00
juvenal.diaz 53e7fbd228 Failing faster on no ip for pimox template 2026-07-22 21:17:33 -06:00
juvenal.diaz 7c0936d889 Fixing pimox template ip 2026-07-22 20:42:19 -06:00
juvenal.diaz 58af55e7e0 Fixing pimox worker seen one cpu instead of two 2026-07-22 19:09:55 -06:00
juvdiaz de990cdfb3 adding platform agument 2026-07-02 21:38:48 -06:00
juvdiaz 7a0a54b60b untrim srgocd after adding 2nd worker 2026-07-02 21:20:14 -06:00
juvdiaz 8c07e3f27b wait on iptables lock 2026-07-02 21:02:49 -06:00
juvdiaz 41db105b8b disabling dex in argo 2026-07-02 20:38:52 -06:00
juvdiaz d5458a3482 Limit diagnostic to failed component 2026-07-02 20:21:31 -06:00
juvdiaz 1e63d0cbc8 Fixing k8s api timing 2026-07-02 19:26:43 -06:00
juvdiaz 12cde3acac Fixing k8s api timing 2026-07-02 17:40:50 -06:00
juvdiaz 8bc44edaf8 Adding limits 2026-07-02 17:32:25 -06:00
juvdiaz 140fc63a5f Moving heimdall outside k8s 2026-07-02 15:49:00 -06:00
juvdiaz 36126132db Adding k8s metrics server 2026-07-02 13:38:21 -06:00
juvdiaz 6cf5abe8bd fixig ailscaled routes 2026-07-02 13:04:11 -06:00
juvdiaz 8f168fde83 Add certbot retries 2026-07-02 12:46:36 -06:00
juvdiaz d278355d68 exportin inventory vars 2026-07-02 12:38:47 -06:00
juvdiaz ffef3386c6 rewrite apt sources as https 2026-07-02 12:11:11 -06:00
juvdiaz 364c028315 fixing kubeadm create 2026-07-02 11:24:13 -06:00
juvdiaz cfcfc39f1f Install iptables if missing 2026-07-02 10:59:58 -06:00
juvdiaz 540ae7e486 Fixing pimox worker having 2 ips 2026-07-02 10:26:19 -06:00
juvdiaz d7d83bef6a worker SSH uses a dedicated known host file 2026-07-02 10:05:50 -06:00
juvdiaz 04d5b259c0 Update docker root dir in rpi 2026-07-02 09:02:52 -06:00
juvdiaz 86ac132629 Fix Pimox worker static networking 2026-07-01 18:41:29 -06:00
juvdiaz e8b9b57d77 Restore known-good Pimox worker defaults 2026-07-01 14:49:25 -06:00
juvdiaz 0cda6573ad Let Pimox generate worker NIC MACs by default 2026-07-01 14:05:11 -06:00
juvdiaz 1bdde9c128 Default Pimox workers back to DHCP networking 2026-07-01 13:14:06 -06:00
juvdiaz 5a14e2d409 Fail Pimox worker network issues faster 2026-07-01 10:49:48 -06:00
juvdiaz dca90ad3aa Fail Pimox worker creation faster 2026-07-01 09:09:39 -06:00
juvdiaz e062de2413 Configure Pimox worker static networking 2026-07-01 09:04:06 -06:00
juvdiaz d63e402012 Start Jeannie Go core migration 2026-07-01 08:49:43 -06:00
juvdiaz 00cfff3ae7 Disable worker Tailscale route acceptance by default 2026-06-29 23:12:56 -06:00
juvdiaz f2fe545471 Fix Pimox worker Tailscale join detection 2026-06-29 21:48:15 -06:00
juvdiaz ef83e71088 Add Jeannie worker tailnet wrapper 2026-06-29 21:45:19 -06:00
juvdiaz df5702de34 Add Tailscale bootstrap for Pimox workers 2026-06-29 21:25:14 -06:00
juvdiaz 0544dba9f5 Require inventory values for edge wiring 2026-06-29 21:09:08 -06:00
juvdiaz 709881be86 Add blockchain devnet metrics dashboard 2026-06-29 19:22:23 -06:00
juvdiaz dd15faabb0 Add Grafana dashboards for Jeannie checks 2026-06-29 18:32:46 -06:00
juvdiaz 1d553771f0 Add read-only Kubernetes access model 2026-06-29 17:11:55 -06:00