fabricesemti80 / home.flux-home-cluster

GitOps state for my cluster using flux v2

Post-deployment notes

(For the cluster deployment please see DEPLOYMENT.md)

🔧 Added tools

• NFS External Provisioner
• Cloudflared
• External DNS
• Kyverno
• External secrets
• 1Passowrd connect

☁️ Cloud Dependencies

While most of my infrastructure and workloads are selfhosted I do rely upon the cloud for certain key parts of my setup. This saves me from having to worry about two things. (1) Dealing with chicken/egg scenarios and (2) services I critically need whether my cluster is online or not.

The alternative solution to these two problems would be to host a Kubernetes cluster in the cloud and deploy applications like HCVault, Vaultwarden, ntfy, and Gatus. However, maintaining another cluster and monitoring another group of workloads is a lot more time and effort than I am willing to put in.

Service	Use
1Password	Secrets with External Secrets
Cloudflare	Domain, DNS and proxy management

🙇 Inspirations / thanks

• https://github.com/billimek/k8s-gitops
• https://github.com/haraldkoch/kochhaus-home
• https://github.com/onedr0p/home-ops
• https://github.com/nklmilojevic/home |

📝 References / links

Password hashed with https://bcrypt.online/ and stored in Bitwarden

Test internal dns

home.flux-home-cluster's Issues

Renovate Dashboard 🤖

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update openshift to 0.13.2
• chore(deps): update xanmanning.k3s to v3.4.2
• fix(container): update image ghcr.io/onedr0p/kubernetes-kubectl to v1.27.4
• fix(container): update image ghcr.io/onedr0p/theme-park to v1.13.10
• fix(github-release): update flux group to v2.0.1 (patch) (fluxcd/flux2, ghcr.io/fluxcd/flux-manifests)
• fix(helm): update chart external-secrets to 0.9.1
• fix(helm): update chart metallb to 0.13.10
• fix(helm): update chart reloader to 1.0.33
• fix(helm): update chart weave-gitops to 4.0.26
• chore(deps): update terraform cloudflare to 4.11.0
• feat(ansible): update community.general to 7.2.0
• feat(container): update image ghcr.io/kube-vip/kube-vip to v0.6.0
• feat(container): update image gitea/gitea to v1.20.1
• feat(container): update image homeassistant/home-assistant to v2023.7.3
• feat(container): update image rancher/system-upgrade-controller to v0.13.0
• feat(helm): update chart cert-manager to v1.12.2
• feat(helm): update chart connect to 1.12.0
• feat(helm): update chart redis to 17.14.0
• feat(helm)!: Update chart gitea to 9.0.4
• feat(helm)!: Update chart kubernetes-dashboard to 7.0.3
• feat(helm)!: Update chart kyverno to 3.0.2
• feat(helm)!: Update chart multus to 5.0.3
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

ansible-galaxy

ansible/requirements.yml

• community.general 7.1.0
• community.sops 1.6.4
• ansible.posix 1.5.4
• ansible.utils 2.10.3
• kubernetes.core 2.4.0
• xanmanning.k3s v3.4.1
• ahuffman.resolv 1.3.2

flux

kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml

• cert-manager v1.11.2

kubernetes/apps/default/echo-server/app/helmrelease.yaml

• app-template 1.5.1

kubernetes/apps/default/hajimari/app/helmrelease.yaml

• hajimari 2.0.2

kubernetes/apps/default/theme-park/app/helmrelease.yaml

• app-template 1.5.1

kubernetes/apps/development/cloudnative-pg/app/helmrelease.yaml

• cloudnative-pg 0.18.1

kubernetes/apps/development/gitea/app/helm-release.yaml

• gitea 8.3.0

kubernetes/apps/development/redis/app/helmrelease.yaml

• redis 17.11.6

kubernetes/apps/flux-system/weave-gitops/app/helmrelease.yaml

• weave-gitops 4.0.24

kubernetes/apps/home/home-assistant/app/helm-release.yaml

• app-template 1.5.1

kubernetes/apps/kube-system/local-path-provisioner/app/helmrelease.yaml

kubernetes/apps/kube-system/metrics-server/app/helmrelease.yaml

• metrics-server 3.10.0

kubernetes/apps/kube-system/reloader/app/helmrelease.yaml

• reloader 1.0.29

kubernetes/apps/monitoring/kubernetes-dashboard/app/helmrelease.yaml

• kubernetes-dashboard 6.0.8

kubernetes/apps/networking/cloudflare-ddns/app/helmrelease.yaml

• app-template 1.5.1

kubernetes/apps/networking/cloudflared/app/helmrelease.yaml

• cloudflare-tunnel 0.7.0

kubernetes/apps/networking/external-dns/app/helmrelease.yaml

• external-dns 1.13.0

kubernetes/apps/networking/ingress-nginx/app/helmrelease.yaml

• ingress-nginx 4.7.1

kubernetes/apps/networking/k8s-gateway/app/helmrelease.yaml

• k8s-gateway 2.0.4

kubernetes/apps/networking/metallb/app/helmrelease.yaml

• metallb 0.13.9

kubernetes/apps/networking/multus/app/helm-release.yaml

• multus 4.0.0

kubernetes/apps/security/external-secrets/app/helmrelease.yaml

• external-secrets 0.9.0

kubernetes/apps/security/onepassword-connect/app/helmrelease.yaml

• connect 1.11.0

kubernetes/apps/system/kyverno/app/helm-release.yaml

• kyverno 2.7.5

kubernetes/flux/config/cluster.yaml

kubernetes/flux/config/flux.yaml

• ghcr.io/fluxcd/flux-manifests v2.0.0-rc.1

kubernetes/flux/repositories/git/local-path-provisioner.yaml

• local-path-provisioner v0.0.24

tmpl/kubernetes/flux/cluster.yaml

github-actions

.github/workflows/link-check.yaml

• actions/checkout v3.5.3@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
• lycheeverse/lychee-action v1.8.0@ec3ed119d4f44ad2673a7232460dc7dff59d2421
• micalevisk/last-issue-action v2.1.0@305829d9728f47beb0029417167a0af890edfd6e
• peter-evans/create-issue-from-file v4.0.1@433e51abf769039ee20ba1293a088ca19d573b7f

.github/workflows/meta-labeler.yaml

• actions/labeler v4.3.0@ac9175f8a1f3625fd0d4fb234536d26811351594

.github/workflows/meta-sync-labels.yaml

• actions/checkout v3.5.3@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
• EndBug/label-sync v2.3.2@da00f2c11fdb78e4fae44adac2fdd713778ea3e8

.github/workflows/release-drafter.yaml

• release-drafter/release-drafter v5.24.0@65c5fb495d1e69aa8c08a3317bc44ff8aabe9772

.github/workflows/release.yaml

• ivangabriele/publish-latest-release v3@df1a4afd8aea9d1f0ba5ebeb89452aeac7bca0a9

helm-values

kubernetes/apps/default/echo-server/app/helmrelease.yaml

• docker.io/jmalloc/echo-server 0.3.5

kubernetes/apps/default/theme-park/app/helmrelease.yaml

• ghcr.io/onedr0p/theme-park 1.13.9@sha256:5788dd85d7fd46013830ab42a8f16aa9ec0d9a9b211dd69e81bda9354715df98

kubernetes/apps/development/gitea/app/helm-release.yaml

• gitea/gitea 1.19.3

kubernetes/apps/home/home-assistant/app/helm-release.yaml

• ghcr.io/onedr0p/postgres-initdb 14.8
• homeassistant/home-assistant 2023.6.3

kubernetes/apps/kube-system/kube-vip/app/daemonset.yaml

• ghcr.io/kube-vip/kube-vip v0.5.12

kubernetes/apps/kube-system/local-path-provisioner/app/helmrelease.yaml

kubernetes/apps/networking/cloudflare-ddns/app/helmrelease.yaml

• ghcr.io/onedr0p/kubernetes-kubectl 1.27.3@sha256:fcc5372b0e1e3d51c0d3a95282fdfd80aeb389aa4077fd430276c511857313cf

kubernetes/apps/networking/ingress-nginx/app/helmrelease.yaml

• ghcr.io/tarampampam/error-pages 2.24.0

kubernetes/apps/networking/multus/app/helm-release.yaml

• ghcr.io/k8snetworkplumbingwg/multus-cni v4.0.2
• ghcr.io/angelnu/cni-plugins 1.3.0

kubernetes/apps/storage/storage-class/provisioner-deploy.yml

• registry.k8s.io/sig-storage/nfs-subdir-external-provisioner v4.0.2

kubernetes/apps/storage/storage-class/site-deploy.yml

kubernetes/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml

kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml

kubernetes

ansible/playbooks/templates/kube-vip-daemonset.yaml.j2

• ghcr.io/kube-vip/kube-vip v0.5.12
• DaemonSet apps/v1

kubernetes/apps/flux-system/addons/webhooks/github/ingress.yaml

• Ingress networking.k8s.io/v1

kubernetes/apps/home/home-assistant/app/helm-release.yaml

• ghcr.io/onedr0p/postgres-initdb 14.8

kubernetes/apps/kube-system/kube-vip/app/daemonset.yaml

• ghcr.io/kube-vip/kube-vip v0.5.12
• DaemonSet apps/v1

kubernetes/apps/kube-system/kube-vip/app/rbac.yaml

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

kubernetes/apps/monitoring/kubernetes-dashboard/app/rbac.yaml

• ClusterRoleBinding rbac.authorization.k8s.io/v1

kubernetes/apps/storage/storage-class/cluster-role-binding.yml

• ClusterRoleBinding rbac.authorization.k8s.io/v1

kubernetes/apps/storage/storage-class/cluster-role.yml

• ClusterRole rbac.authorization.k8s.io/v1

kubernetes/apps/storage/storage-class/provisioner-deploy.yml

• registry.k8s.io/sig-storage/nfs-subdir-external-provisioner v4.0.2
• Deployment apps/v1

kubernetes/apps/storage/storage-class/role-binding.yml

• RoleBinding rbac.authorization.k8s.io/v1

kubernetes/apps/storage/storage-class/role.yml

• Role rbac.authorization.k8s.io/v1

kubernetes/apps/storage/storage-class/site-deploy.yml

• Deployment apps/v1

kubernetes/apps/storage/storage-class/site-ingress.yml

• Ingress networking.k8s.io/v1

kubernetes/apps/storage/storage-class/storage-class.yml

• StorageClass storage.k8s.io/v1

kubernetes/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml

kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml

kubernetes/apps/system/kyverno/app/rbac.yaml

• ClusterRole rbac.authorization.k8s.io/v1
• ClusterRoleBinding rbac.authorization.k8s.io/v1

kustomize

kubernetes/apps/system-upgrade/system-upgrade-controller/app/kustomization.yaml

• rancher/system-upgrade-controller v0.12.0
• rancher/system-upgrade-controller v0.11.0

kubernetes/bootstrap/kustomization.yaml

• fluxcd/flux2 v2.0.0-rc.4

pip_requirements

ansible/requirements.txt

• openshift ==0.13.1

pre-commit

.pre-commit-config.yaml

• adrienverge/yamllint v1.32.0
• gruntwork-io/pre-commit v0.1.22

regex

ansible/inventory/group_vars/kubernetes/k3s.yml

• k3s-io/k3s v1.27.3+k3s1

kubernetes/apps/system-upgrade/system-upgrade-controller/plans/agent.yaml

• k3s-io/k3s v1.27.3+k3s1

kubernetes/apps/system-upgrade/system-upgrade-controller/plans/server.yaml

• k3s-io/k3s v1.27.3+k3s1

terraform

terraform/cloudflare/main.tf

• cloudflare 4.9.0
• http 3.4.0
• sops 0.7.2

---

• Check this box to trigger a request for Renovate to run again on this repository

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: Cannot find preset's package (github>onedr0p/flux-cluster-template//.github/renovate/autoMerge.json5)